Explain CVE-2005-1983
Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm.
Affected Products: n/a
References: [{'name': 'ADV-2005-1354', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/1354'}, {'name': 'oval:org.mitre.oval:def:497', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A497'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hsc.fr/ressources/presentations/null_sessions/'}, {'name': '18605', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/18605'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.frsirt.com/english/alerts/20050814.ZotobA.php'}, {'name': '20050811 Windows 2000 universal exploit for MS05-039', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0384.html'}, {'name': 'VU#998653', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/998653'}, {'name': '14513', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/14513'}, {'name': 'oval:org.mitre.oval:def:267', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A267'}, {'name': 'P-266', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-266.shtml'}, {'name': '1014640', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014640'}, {'name': 'win-plugandplay-bo(21602)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/21602'}, {'name': 'TA05-221A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA05-221A.html'}, {'name': '16372', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/16372'}, {'name': '20050809 Windows Plug and Play Remote Compromise', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://xforce.iss.net/xforce/alerts/id/202'}, {'name': 'oval:org.mitre.oval:def:100073', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100073'}, {'name': 'MS05-039', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-039'}, {'name': 'oval:org.mitre.oval:def:160', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A160'}, {'name': 'oval:org.mitre.oval:def:474', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A474'}, {'name': 'oval:org.mitre.oval:def:783', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A783'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/windowsntfocus/5YP0E00GKW.html'}]
CVE State: PUBLISHED