CVE-2005-3981: microsoft windows_2003_server
Vulnerability summary
CVE-2005-3981 is a medium (CVSS 4.9) vulnerability in microsoft windows_2003_server. EPSS estimates a 3.65% chance of exploitation in the next 30 days, higher than 89.5% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 04-12-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
NOTE: this issue has been disputed by third parties. Microsoft Windows XP, 2000, and 2003 allows local users to kill a writable process by using the CreateRemoteThread function with certain arguments on a process that has been opened using the OpenProcess function, possibly involving an invalid address for the start routine. NOTE: followup posts have disputed this issue, saying that if a user already has privileges to write to a process, then other functions could be called or the process could be terminated using PROCESS_TERMINATE
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
3.65%
Chance of exploitation in the next 30 days
Percentile
90%
Versus all other CVEs
30-day change
0.00 pp
From 3.65% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (securityfocus.com)
Maturity: unknown
Microsoft Windows XP/2000/2003 - CreateRemoteThread Local Denial of Service
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft1 product
- windows_2003_serverenterprise | enterprise:sp1 | r2 | r2:sp1 | standard | standard:sp1 | web | web:sp1
1 vendor · 1 product