CVEvulnerability

CVE-2005-3981

4.9 MEDIUM Published 2005-12-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-12-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:N/A:C

Description

NOTE: this issue has been disputed by third parties. Microsoft Windows XP, 2000, and 2003 allows local users to kill a writable process by using the CreateRemoteThread function with certain arguments on a process that has been opened using the OpenProcess function, possibly involving an invalid address for the start routine. NOTE: followup posts have disputed this issue, saying that if a user already has privileges to write to a process, then other functions could be called or the process could be terminated using PROCESS_TERMINATE

Affected configurations

• microsoft windows 2000 • microsoft windows 2003 server enterprise • microsoft windows 2003 server r2 • microsoft windows 2003 server standard • microsoft windows 2003 server web • microsoft windows xp

References