CVE-2005-2120
mediumpriority · attend · 58EPSS 0.620 · 99 %ileexploit · functionalEUUSEPSS · scored 2026-10-27
Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "\" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
exploits (3)
Public proof-of-concept and weaponised exploit code.
- EDB-1269Microsoft Windows Plug-and-Play - 'Umpnpmgr.dll' Denial of Service (MS05-047) (1)functional · exploit_db
- EDB-1271Microsoft Windows Plug-and-Play - 'Umpnpmgr.dll' Denial of Service (MS05-047) (2)functional · exploit_db
- auxiliary/dos/windows/smb/ms05_047_pnpMicrosoft Plug and Play Service Registry Overflowfunctional · metasploit
affected products (3)
Products and version ranges known to be affected.
also known as (2)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (30)
External citations — patches, advisories, analysis.
- http://secunia.com/advisories/17166enisa_euvd
- http://secunia.com/advisories/17172enisa_euvd
- http://secunia.com/advisories/17223enisa_euvd
- http://securityreason.com/securityalert/71enisa_euvd
- http://securitytracker.com/id?1015042enisa_euvd
- http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdfenisa_euvd
- http://www.eeye.com/html/research/advisories/AD20051011c.htmlenisa_euvd
- http://www.kb.cert.org/vuls/id/214572enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan