PT-2005-3565 · Sysinternals · Sysinternals Process Explorer+1

Published 2005-08-23 · Updated 2008-09-05 · CVE-2005-2679

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sysinternals Process Explorer versions 9.23 and earlier, up to but not including 9.25

Description A buffer overflow issue exists, allowing local users to execute arbitrary code via a long CompanyName field in the VersionInfo information in a running process.

Recommendations For versions 9.23 and earlier, up to but not including 9.25, update to version 9.25 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2005-2679

Affected Products

Process Explorer

Sysinternals Process Explorer

References · 5

• 🔥 http://securitytracker.com/id?1014742 · Exploit
• 🔥 http://securityfocus.com/bid/14616 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-2679 · Security Note
• http://sysinternals.com/Forum/forum_posts.asp?TID=957&PN=1 · Note
• http://secunia.com/advisories/16525 · Note