CVE-2005-2827 EXPLOIT
7.2
HIGH · CVSS 2.0 · EPSS 2.6% (pctl 85)
Patch early
A public exploit exists.
Description
The thread termination routine in the kernel for Windows NT 4.0 and 2000 (NTOSKRNL.EXE) allows local users to modify kernel memory and execution flow via steps in which a terminating thread causes Asynchronous Procedure Call (APC) entries to free the wrong data, aka the "Windows Kernel Vulnerability."
Scoring
| CVSS | 7.2 (HIGH, v2.0) |
|---|---|
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
| EPSS | 2.63% — more likely to be exploited than 85% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2005-12-14 |
| Last modified | 2026-06-16 |
Affected (2)
| Vendor | Product |
|---|---|
| microsoft | windows 2000 |
| microsoft | windows nt |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Microsoft Windows Server 2000 Kernel - APC Data-Free Local Escalation (MS05-055) | 2006-01-05 |
References
- http://secunia.com/advisories/15821
- http://secunia.com/advisories/18064
- http://secunia.com/advisories/18311
- http://securityreason.com/securityalert/252
- http://securitytracker.com/id?1015347
- http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf
- http://www.eeye.com/html/research/advisories/AD20051213.html
- http://www.osvdb.org/18823
- http://www.securityfocus.com/archive/1/419377/100/0/threaded
- http://www.securityfocus.com/bid/15826
- http://www.vupen.com/english/advisories/2005/2868
- http://www.vupen.com/english/advisories/2005/2909
- http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-055
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23447
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1583
- http://secunia.com/advisories/15821
- http://secunia.com/advisories/18064
- http://secunia.com/advisories/18311
- http://securityreason.com/securityalert/252
→ the Explorer · watch your stack · NVD