CVE-2005-3981

NOTE: this issue has been disputed by third parties. Microsoft Windows XP, 2000, and 2003 allows local users to kill a writable process by using the CreateRemoteThread function with certain arguments on a process that has been opened using the OpenProcess function, possibly involving an invalid address for the start routine. NOTE: followup posts have disputed this issue, saying that if a user already has privileges to write to a process, then other functions could be called or the process could be terminated using PROCESS_TERMINATE

CVSS v2.0

4.9 MEDIUMAV:L/AC:L/Au:N/C:N/I:N/A:C

EPSS

3.65% chance of exploitation in the next 30 days, 89th percentile

Published

2005-12-04

Updated

2024-08-07

Proof-of-concept exploits (2)

• http://www.securityfocus.com/archive/1/418289/100/0/threaded
• http://www.securityfocus.com/archive/1/418431/100/0/threaded

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/26690

References

• CVE Record
• NVD entry

Related

• CVE-2005-3980
• CVE-2005-3982
• CVE-2005-3978
• CVE-2005-3986
• CVE-2005-3972
• CVE-2005-3988