CVE-2005-2679

Buffer overflow in Sysinternals Process Explorer 9.23, and other versions before 9.25, allows local users to execute arbitrary code via a long CompanyName field in the VersionInfo information in a running process.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2005-08-23

Last modified

2024-09-17

Affected products

• Process Explorer (Sysinternals)

References

• http://secunia.com/advisories/16525
• http://securitytracker.com/id?1014742
• http://www.securityfocus.com/bid/14616
• http://www.sysinternals.com/Forum/forum_posts.asp?TID=957&PN=1