VDB
CVE-2005-0551
CVE-2005-0551
PUBLISHED
CVSS 10 CRITICAL
Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application that provides console window information with a long FaceName value.
EPSS 36.52% · 97.2th percentile
Risk Scores
CVSS 2.0
10
EPSS Score
36.52%
97.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| microsoft | windows_xp | |
| microsoft | windows_2000 | |
| microsoft | windows_2003_server | r2 |
Timeline
- Apr 13, 2005 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Sep 8, 2023 EPSS Score
- Oct 30, 2023 EPSS Score
- Dec 22, 2023 EPSS Score
References
- oval:org.mitre.oval:def:1822 vdb
- 20050412 Microsoft Windows CSRSS.EXE Stack Overflow Vulnerability third-party-advisory
- oval:org.mitre.oval:def:777 vdb
- oval:org.mitre.oval:def:266 vdb
- MS05-018 vendor-advisory
- oval:org.mitre.oval:def:3544 vdb
- https://nvd.nist.gov/vuln/detail/CVE-2005-0551 advisory