$ cve CVE-2005-2120 JSON

CVE-2005-2120 EXPLOIT

6.5

MEDIUM · CVSS 2.0 · EPSS 62% (pctl 99)

Patch early

A public exploit exists.

Description

Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "\" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call.

Scoring

CVSS	6.5 (MEDIUM, v2.0)
Vector	AV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS	61.97% — more likely to be exploited than 99% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2005-10-13
Last modified	2026-06-16

Affected (2)

Vendor	Product
microsoft	windows 2000
microsoft	windows xp

Public exploits

Source	Title	Date
exploit-db	Microsoft Windows Plug-and-Play - 'Umpnpmgr.dll' Denial of Service (MS05-047) (2)	2005-10-24
exploit-db	Microsoft Windows Plug-and-Play - 'Umpnpmgr.dll' Denial of Service (MS05-047) (1)	2005-10-21

References

→ the Explorer · watch your stack · NVD