Vulnerability in Sysinternals Process Explorer

CVE-2005-2679

Buffer overflow in Sysinternals Process Explorer 9.23, and other versions before 9.25, allows local users to execute arbitrary code via a long CompanyName field in the VersionInfo information in a running process.

EPSS: 0.035 (87.8th percentile) — read the EPSS interpretation.

Affected products

Sysinternals Process_explorer — versions 9.23.0.0
N/a — versions n/a

References

cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (Exploit, vdb-entry, x_refsource_SECTRACK, Vendor Advisory)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (x_refsource_CONFIRM)