###  CVE-2005-1983

#### Describe

Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm

#### ImpactVersion

| Product      | CPU Architecture | Version | Update | Tested |
| ------------ | ---------------- | ------- | ------ | ------ |
| Windows 2000 |                  |         |        |        |
| Windows Xp   |                  |         | SP1    |        |

#### Patch

```
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2005-1983
```

#### Utilization

The vulnerability does not test, the root directory is stored in the network collection **[CVE number] .zip** EXP or POC, code status unknown

#### ProjectSource

- None

#### Analyse

- https://blog.csdn.net/tomqq/article/details/1951128
