medium4.9Public exploit code
CVE-2005-3981
NOTE: this issue has been disputed by third parties.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows XP/2000/2003 - CreateRemoteThread Local Denial of Service2005-12-01 · dos · windows · Verified
Impact
NOTE: this issue has been disputed by third parties. Microsoft Windows XP, 2000, and 2003 allows local users to kill a writable process by using the CreateRemoteThread function with certain arguments on a process that has been opened using the OpenProcess function, possibly involving an invalid address for the start routine. NOTE: followup posts have disputed this issue, saying that if a user already has privileges to write to a process, then other functions could be called or the process could be terminated using PROCESS_TERMINATE
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 2000 | All versions |
| Microsoft | Windows 2003 Server | Versions enterprise, r2, standard, web |
| Microsoft | Windows Xp | All versions |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/418289/100/0/threaded
- http://www.securityfocus.com/archive/1/418431/100/0/threaded
- http://www.securityfocus.com/bid/15671/
- http://www.securityfocus.com/archive/1/418289/100/0/threaded
- http://www.securityfocus.com/archive/1/418431/100/0/threaded
- http://www.securityfocus.com/bid/15671/