CVE-2005-0050

Description

The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate the length of messages, which leads to an "unchecked buffer" and allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, aka the "License Logging Service Vulnerability."

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A644

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4786

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3582

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2568

https://exchange.xforce.ibmcloud.com/vulnerabilities/19101

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-010

http://www.us-cert.gov/cas/techalerts/TA05-039A.html

http://www.kb.cert.org/vuls/id/130433

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3