Lucene search
MitreCVE-2005-3172HistoryOct 06, 2005 - 10:02 a.m.
CVE-2005-3172
2005-10-0610:02:00
mitre
web.nvd.nist.gov
27
nvd
cve-2005-3172
microsoft windows
widechartomultibyte
data corruption
buffer overflow
japanese characters
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
7.5
Confidence
High
EPSS
0.002
Percentile
65.0%
The WideCharToMultiByte function in Microsoft Windows 2000 before Update Rollup 1 for SP4 does not properly convert strings with Japanese composite characters in the last character, which could prevent the string from being null terminated and lead to data corruption or enable buffer overflow attacks.
Affected configurations
Node
microsoftwindows_2000sp4fr
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | windows_2000 | * | cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:* |
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
7.5
Confidence
High
EPSS
0.002
Percentile
65.0%
Related for CVE-2005-3172