CVEvulnerability
CVE-2005-3981
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-12-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:N/A:C
Description
NOTE: this issue has been disputed by third parties. Microsoft Windows XP, 2000, and 2003 allows local users to kill a writable process by using the CreateRemoteThread function with certain arguments on a process that has been opened using the OpenProcess function, possibly involving an invalid address for the start routine. NOTE: followup posts have disputed this issue, saying that if a user already has privileges to write to a process, then other functions could be called or the process could be terminated using PROCESS_TERMINATE
Affected configurations
• microsoft windows 2000
• microsoft windows 2003 server enterprise
• microsoft windows 2003 server r2
• microsoft windows 2003 server standard
• microsoft windows 2003 server web
• microsoft windows xp
References
- http://www.securityfocus.com/archive/1/418289/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/418431/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/15671/ Exploit
- http://www.securityfocus.com/archive/1/418289/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/418431/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/15671/ Exploit