Buffer overflow in Sysinternals Process Explorer 9.23, and other versions before 9.25, allows local users to execute arbitrary code via a long CompanyName field in the VersionInfo information in a running process.
References
Link | Resource |
---|---|
http://www.sysinternals.com/Forum/forum_posts.asp?TID=957&PN=1 | |
http://www.securityfocus.com/bid/14616 | Exploit |
http://securitytracker.com/id?1014742 | Exploit Vendor Advisory |
http://secunia.com/advisories/16525 |
Configurations
Information
Published : 2005-08-22 21:00
Updated : 2008-09-05 13:52
NVD link : CVE-2005-2679
Mitre link : CVE-2005-2679
JSON object : View
CWE
Products Affected
sysinternals
- process_explorer