$ cve CVE-2005-1983 JSON

CVE-2005-1983 EXPLOIT

10.0

HIGH · CVSS 2.0 · EPSS 93% (pctl 100)

Patch early

A public exploit exists.

Description

Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm.

Scoring

CVSS	10.0 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS	93.01% — more likely to be exploited than 100% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2005-08-10
Last modified	2026-06-16

Affected (2)

Vendor	Product
microsoft	windows 2000
microsoft	windows xp

Public exploits

Source	Title	Date
exploit-db	Microsoft Plug and Play Service - Overflow (MS05-039) (Metasploit)	2010-08-30
exploit-db	Microsoft Windows Plug-and-Play Service - Remote Universal (Spanish) (MS05-039)	2005-08-25
exploit-db	Microsoft Windows Plug-and-Play Service - Remote Universal (MS05-039)	2005-08-12
exploit-db	Microsoft Windows - Plug-and-Play Service Remote Overflow (MS05-039)	2005-08-11

References

→ the Explorer · watch your stack · NVD