CVE-2005-2120
Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft...
Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call.
- Record
CVE-2005-2120- CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call.
- Record
CVE-2005-2120- Updated
- 2026-11-02
EUVDEUVD-2005-2121 No score
Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call.
- Record
EUVD-2005-2121- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c4pq-7f26-f57v No score
Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft...
Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call.
- Record
GHSA-c4pq-7f26-f57v- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Windows Plug-and-Play - 'Umpnpmgr.dll' Denial of Service (MS05-047) (1) | 2005-10-21 |
| Exploit-DB | Microsoft Windows Plug-and-Play - 'Umpnpmgr.dll' Denial of Service (MS05-047) (2) | 2005-10-24 |
| Metasploit | Microsoft Plug and Play Service Registry Overflow |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2120 is a medium vulnerability (CVSS 6.5) in Microsoft Windows 2000, published October 13, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 62.0%, the 99th percentile. No source names a fixed version.
References
securityfocus.com/bid/15065
secunia.com/advisories/17166
docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-047
support.avaya.com/elmodocs2/security/ASA-2005-214.pdf
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1244
Show 11 moreShow less
securitytracker.com/id?1015042
eeye.com/html/research/advisories/AD20051011c.html
securityreason.com/securityalert/71
osvdb.org/18830
kb.cert.org/vuls/id/214572
us-cert.gov/cas/techalerts/TA05-284A.html
nvd.nist.gov/vuln/detail/CVE-2005-2120
github.com/advisories/GHSA-c4pq-7f26-f57v