CVE-2005-2120

🗓️ 13 Oct 2005 04:00:00Reported by microsoftType

cve

cve🔗 web.nvd.nist.gov👁 87 Views🌐 WEB

Stack-based buffer overflow in Microsoft Windows

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2005-2120	29 May 201815:50	–	circl
Check Point Advisories	Microsoft Windows Plug and Play Registry Key Buffer Overflow (MS05-047; CVE-2005-2120)	11 Oct 200500:00	–	checkpoint_advisories
Cvelist	CVE-2005-2120	13 Oct 200504:00	–	cvelist
Exploit DB	Microsoft Windows Plug-and-Play - 'Umpnpmgr.dll' Denial of Service (MS05-047) (1)	21 Oct 200500:00	–	exploitdb
Exploit DB	Microsoft Windows Plug-and-Play - 'Umpnpmgr.dll' Denial of Service (MS05-047) (2)	24 Oct 200500:00	–	exploitdb
Metasploit	Microsoft Plug and Play Service Registry Overflow	3 Dec 200623:35	–	metasploit
NVD	CVE-2005-2120	13 Oct 200510:02	–	nvd
Packet Storm	Microsoft Plug and Play Service Registry Overflow	31 Aug 202400:00	–	packetstorm
securityvulns	[EEYEB20050803] - Windows UMPNPMGR wsprintfW Stack Buffer Overflow Vulnerability	12 Oct 200500:00	–	securityvulns
securityvulns	Microsoft Security Bulletin MS05-047 Vulnerability in Plug and Play Could Allow Remote Code Execution and Local Elevation of Privilege (905749)	12 Oct 200500:00	–	securityvulns

NVD

Node

OR

microsoft windows_2000sp4fr

microsoft windows_xpsp1tablet_pc

microsoft windows_xpsp2tablet_pc

Source	Link
secunia	www.secunia.com/advisories/17172
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1328
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-047
eeye	www.eeye.com/html/research/advisories/AD20051011c.html
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1519
securitytracker	www.securitytracker.com/id
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1244
secunia	www.secunia.com/advisories/17223
securityreason	www.securityreason.com/securityalert/71
securityfocus	www.securityfocus.com/bid/15065

Parameter	Position	Path	Description	CWE
HTREE\\ROOT	path	\\PIPE\\browser	Overflow in PnP service triggered by crafted registry key path sent via DCERPC over SMB pipe (browser).
\\	path	\\PIPE\\browser	Overflow in PnP service triggered by crafted registry key path sent via DCERPC over SMB pipe (browser).
(backslash) repeated to 1024 characters to overflow the stack	path	\\PIPE\\browser	Overflow in PnP service triggered by crafted registry key path sent via DCERPC over SMB pipe (browser).
HTREE\\ROOT	path	\\PIPE\\srvsvc	Overflow in PnP service triggered by crafted registry key path sent via DCERPC over SMB pipe (srvsvc).
\\	path	\\PIPE\\srvsvc	Overflow in PnP service triggered by crafted registry key path sent via DCERPC over SMB pipe (srvsvc).
(backslash) repeated to 1024 characters to overflow the stack	path	\\PIPE\\srvsvc	Overflow in PnP service triggered by crafted registry key path sent via DCERPC over SMB pipe (srvsvc).
HTREE\\ROOT	path	\\PIPE\\wkssvc	Overflow in PnP service triggered by crafted registry key path sent via DCERPC over SMB pipe (wkssvc).
\\	path	\\PIPE\\wkssvc	Overflow in PnP service triggered by crafted registry key path sent via DCERPC over SMB pipe (wkssvc).
(backslash) repeated to 1024 characters to overflow the stack	path	\\PIPE\\wkssvc	Overflow in PnP service triggered by crafted registry key path sent via DCERPC over SMB pipe (wkssvc).
HTREE\\ROOT	path	\\PIPE\\ntsvcs	Overflow in PnP service triggered by crafted registry key path sent via DCERPC over SMB pipe (ntsvcs).

16 Jun 2026 22:14Current

7.5High risk

Vulners AI Score7.5

CVSS 26.5

EPSS0.61971

cve-2005-2120 buffer overflow plug and play umpnpmgr.dll microsoft windows remote code execution local code execution authentication registry key overflow vulnerability wsprintfw function