CVE-2005-2679 - Buffer overflow in Sysinternals Process Explorer 9.23, and other versions before 9.25, allows local

CVE-2005-2679

Summary

Buffer overflow in Sysinternals Process Explorer 9.23, and other versions before 9.25, allows local users to execute arbitrary code via a long CompanyName field in the VersionInfo information in a running process.

References

http://secunia.com/advisories/16525
http://securitytracker.com/id?1014742
http://www.securityfocus.com/bid/14616
http://www.sysinternals.com/Forum/forum_posts.asp?TID=957&PN=1

Vulnerable Configurations

cpe:2.3:a:sysinternals:process_explorer:9.23.0.0:*:*:*:*:*:*:*
cpe:2.3:a:sysinternals:process_explorer:9.23.0.0:*:*:*:*:*:*:*

CVSS

Base:	10.0 (as of 05-09-2008 - 20:52)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bid	14616
confirm	http://www.sysinternals.com/Forum/forum_posts.asp?TID=957&PN=1
sectrack	1014742
secunia	16525

Last major update

05-09-2008 - 20:52

Published

23-08-2005 - 04:00

Last modified

05-09-2008 - 20:52