Sploitus

Exploit for Windows Plug and Play buffer overflow

saint · 2006-03-03

Exploit Code

MARKDOWN33 lines
## https://sploitus.com/exploit?id=SAINT:5FF736F5EAC824BEFB3C534FCFA9B449
Added: 03/03/2006  
CVE: CVE-2005-1983  
BID: 14513  
OSVDB: 18605  


### Background

The Windows Plug and Play service allows Windows operating systems to automatically detect and configure a new hardware device, such as a mouse. 

### Problem

A buffer overflow in the Plug and Play service could allow command execution with administrative privileges. 

### Resolution

Apply the patch referenced in Microsoft Security Bulletin 05-047. 

### References

http://www.microsoft.com/technet/security/bulletin/MS05-039.mspx   


### Limitations

Remote, uncredentialed command execution is not possible on Windows XP or Windows Server 2003. 

Successful exploitation may cause the target to reboot after disconnection. 

### Platforms

Windows