Vulnerability in N/a
CVE-2005-3644
PNP_GetDeviceList (upnp_getdevicelist) in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service (memory consumption) via a DCE RPC request that specif…
EPSS: 0.508 (97.9th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- 911052 (vendor-advisory, x_refsource_MSKB)
- 15460 (vdb-entry, x_refsource_BID)
- 1015233 (vdb-entry, x_refsource_SECTRACK)
- www.securiteam.com/exploits/6V00C15EKM.html (x_refsource_MISC)
- 17595 (x_refsource_SECUNIA, third-party-advisory)
- research.eeye.com/html/alerts/zeroday/20051116.html (x_refsource_MISC)
- 1328 (exploit, x_refsource_EXPLOIT-DB)
- www.frsirt.com/exploits/20051117.Win_upnp_getdevicelist.c.php (x_refsource_MISC)
- www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2005/20051116 (x_refsource_MISC)
Frequently asked questions
- What is CVE-2005-3644?
- CVE-2005-3644 is a vulnerability in N/a. Published 2005-11-17.
- Is CVE-2005-3644 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.