Vulnerability in Microsoft Windows 2000
CVE-2005-2827
The thread termination routine in the kernel for Windows NT 4.0 and 2000 (NTOSKRNL.EXE) allows local users to modify kernel memory and execution flow via steps in which a terminating thread causes Asynchronous Procedure Call (APC) entries to free the wrong data, aka the "Windows Kernel Vulnerability."
EPSS: 0.026 (83.9th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows_2000
- Microsoft Windows_nt — versions 4.0
- N/a — versions n/a
References
- secure@microsoft.com (x_refsource_SECUNIA, third-party-advisory)
- secure@microsoft.com (vdb-entry, x_refsource_VUPEN)
- secure@microsoft.com (Patch, vdb-entry, x_refsource_BID)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
- secure@microsoft.com (x_refsource_CONFIRM)
- secure@microsoft.com (vdb-entry, x_refsource_VUPEN)
- secure@microsoft.com (vdb-entry, x_refsource_XF)
- secure@microsoft.com (x_refsource_SECUNIA, third-party-advisory)
- secure@microsoft.com (x_refsource_OVAL, signature, vdb-entry)
- secure@microsoft.com (x_refsource_EEYE, third-party-advisory)