$ cve CVE-2005-3981 JSON

CVE-2005-3981 EXPLOIT

4.9

MEDIUM · CVSS 2.0 · EPSS 3.6% (pctl 89)

Patch early

A public exploit exists.

Description

NOTE: this issue has been disputed by third parties. Microsoft Windows XP, 2000, and 2003 allows local users to kill a writable process by using the CreateRemoteThread function with certain arguments on a process that has been opened using the OpenProcess function, possibly involving an invalid address for the start routine. NOTE: followup posts have disputed this issue, saying that if a user already has privileges to write to a process, then other functions could be called or the process could be terminated using PROCESS_TERMINATE

Scoring

CVSS	4.9 (MEDIUM, v2.0)
Vector	AV:L/AC:L/Au:N/C:N/I:N/A:C
EPSS	3.65% — more likely to be exploited than 89% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2005-12-04
Last modified	2026-06-16

Affected (3)

Vendor	Product
microsoft	windows 2000
microsoft	windows 2003 server
microsoft	windows xp

Public exploits

Source	Title	Date
exploit-db	Microsoft Windows XP/2000/2003 - CreateRemoteThread Local Denial of Service	2005-12-01

References

→ the Explorer · watch your stack · NVD