MS05-047: Vulnerability in Plug and Play Could Allow Remote Code Execution and Local Elevation of Privilege (905749)
High Nessus Plugin ID 20000
SynopsisA flaw in the Plug and Play service could allow an authenticated
attacker to execute arbitrary code on the remote host and therefore
elevate his privileges.
DescriptionThe remote host contains a version of the Plug and Play service that
contains a vulnerability in the way it handles user-supplied data.
An authenticated attacker could exploit this flaw by sending a malformed
RPC request to the remote service and execute code within the SYSTEM
SolutionMicrosoft has released a set of patches for Windows 2000 and XP.