CVSS: 7.8EPSS: 28%CPEs: 13EXPL: 2CVE-2005-3644 – Microsoft Windows Server 2000 - UPNP 'getdevicelist' Memory Leak Denial of Service
https://notcve.org/view.php?id=CVE-2005-3644
PNP_GetDeviceList (upnp_getdevicelist) in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service (memory consumption) via a DCE RPC request that specifies a large output buffer size, a variant of CVE-2006-6296, and a different vulnerability than CVE-2005-2120. PNP_GetDeviceList (upnp_getdevicelist) en UPnP de Windows 2000 Server SP4 y anteriores, y posiblemente Windows XP SP1 y anteriores, permite a atacantes remotos causar una denegación de servicio (consumo de memoria) mediante un petición RPC DCE artesanal, posiblemente incluyendo una lista de dispositivos inválida o mal formada, una vulnerabilidad distinta de CVE-2005-2120. • https://www.exploit-db.com/exploits/1328 http://research.eeye.com/html/alerts/zeroday/20051116.html http://secunia.com/advisories/17595 http://securitytracker.com/id?1015233 http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2005/20051116 http://www.frsirt.com/exploits/20051117.Win_upnp_getdevicelist.c.php http://www.microsoft.com/technet/security/advisory/911052.mspx http://www.securiteam.com/exploits/6V00C15EKM.html http://www.securityfocus.com/bid/15460 • CWE-399: Resource Management Errors •
CVSS: 7.6EPSS: 96%CPEs: 9EXPL: 2CVE-2005-2124 – Microsoft Windows Metafile - 'gdi32.dll' Denial of Service (MS05-053)
https://notcve.org/view.php?id=CVE-2005-2124
Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1, related to "An unchecked buffer" and possibly buffer overflows, allows remote attackers to execute arbitrary code via a crafted Windows Metafile (WMF) format image, aka "Windows Metafile Vulnerability." • https://www.exploit-db.com/exploits/1343 https://www.exploit-db.com/exploits/1346 http://secunia.com/advisories/17223 http://secunia.com/advisories/17461 http://secunia.com/advisories/17498 http://securityreason.com/securityalert/161 http://securitytracker.com/id?1015168 http://support.avaya.com/elmodocs2/security/ASA-2005-228.pdf http://www.eeye.com/html/research/advisories/AD20051108a.html http://www.eeye.com/html/research/advisories/AD20051108b.html http://www.kb.cert.org&#x •
CVSS: 7.5EPSS: 40%CPEs: 9EXPL: 1CVE-2005-2123 – Microsoft Windows Metafile - 'mtNoObjects' Denial of Service (MS05-053)
https://notcve.org/view.php?id=CVE-2005-2123
Multiple integer overflows in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allow remote attackers to execute arbitrary code via crafted Windows Metafile (WMF) and Enhanced Metafile (EMF) format images that lead to heap-based buffer overflows, as demonstrated using MRBP16::bCheckRecord. • https://www.exploit-db.com/exploits/1346 http://secunia.com/advisories/17223 http://secunia.com/advisories/17461 http://secunia.com/advisories/17498 http://securitytracker.com/id?1015168 http://support.avaya.com/elmodocs2/security/ASA-2005-228.pdf http://www.eeye.com/html/research/advisories/AD20051108b.html http://www.kb.cert.org/vuls/id/300549 http://www.securityfocus.com/bid/15352 http://www.us-cert.gov/cas/techalerts/TA05-312A.html http://www.vupen.com/english& •
CVSS: 5.1EPSS: 87%CPEs: 12EXPL: 0CVE-2005-2118
https://notcve.org/view.php?id=CVE-2005-2118
Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote user-assisted attackers to execute arbitrary commands via a crafted shortcut (.lnk) file with long font properties that lead to a buffer overflow when the user views the file's properties using Windows Explorer, a different vulnerability than CVE-2005-2122. • http://secunia.com/advisories/17168 http://secunia.com/advisories/17172 http://secunia.com/advisories/17223 http://securitytracker.com/id?1015040 http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf http://www.argeniss.com/research/MSBugPaper.pdf http://www.securityfocus.com/bid/15070 http://www.us-cert.gov/cas/techalerts/TA05-284A.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-049 https://oval.cisecurity.org/repository/search/definition/ •
CVSS: 2.6EPSS: 10%CPEs: 4EXPL: 0CVE-2005-2126
https://notcve.org/view.php?id=CVE-2005-2126
The FTP client in Windows XP SP1 and Server 2003, and Internet Explorer 6 SP1 on Windows 2000 SP4, when "Enable Folder View for FTP Sites" is enabled and the user manually initiates a file transfer, allows user-assisted, remote FTP servers to overwrite files in arbitrary locations via crafted filenames. • http://secunia.com/advisories/17163 http://secunia.com/advisories/17172 http://secunia.com/advisories/17223 http://securitytracker.com/id?1015036 http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf http://www.kb.cert.org/vuls/id/415828 http://www.securiteam.com/windowsntfocus/6M00I0KEAU.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-044 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1146 https://oval. •