NOTE: this issue has been disputed by third parties. Microsoft Windows XP, 2000, and 2003 allows local users to kill a writable process by using the CreateRemoteThread function with certain arguments on a process that has been opened using the OpenProcess function, possibly involving an invalid address for the start routine. NOTE: followup posts have disputed this issue, saying that if a user already has privileges to write to a process, then other functions could be called or the process could be terminated using PROCESS_TERMINATE
2005-12-04T11:03:00.000
2025-04-03T01:03:51.193
Deferred
CVSSv2: 4.9 (MEDIUM)
AV:L/AC:L/Au:N/C:N/I:N/A:C
3.9
6.9
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Operating System | microsoft | windows_2000 | * | Yes |
Operating System | microsoft | windows_2000 | * | Yes |
Operating System | microsoft | windows_2000 | * | Yes |
Operating System | microsoft | windows_2000 | * | Yes |
Operating System | microsoft | windows_2000 | * | Yes |
Operating System | microsoft | windows_2003_server | enterprise | Yes |
Operating System | microsoft | windows_2003_server | enterprise | Yes |
Operating System | microsoft | windows_2003_server | r2 | Yes |
Operating System | microsoft | windows_2003_server | r2 | Yes |
Operating System | microsoft | windows_2003_server | standard | Yes |
Operating System | microsoft | windows_2003_server | standard | Yes |
Operating System | microsoft | windows_2003_server | web | Yes |
Operating System | microsoft | windows_2003_server | web | Yes |
Operating System | microsoft | windows_xp | * | Yes |
Operating System | microsoft | windows_xp | * | Yes |
Operating System | microsoft | windows_xp | * | Yes |
Operating System | microsoft | windows_xp | * | Yes |
Operating System | microsoft | windows_xp | * | Yes |
Operating System | microsoft | windows_xp | * | Yes |
Operating System | microsoft | windows_xp | * | Yes |
Operating System | microsoft | windows_xp | * | Yes |