MS05-047: Vulnerability in Plug and Play Could Allow Remote Code Execution and Local Elevation of Privilege (905749)
High Nessus Plugin ID 20000
SynopsisA flaw in the Plug and Play service could allow an authenticated attacker to execute arbitrary code on the remote host and therefore elevate his privileges.
DescriptionThe remote host contains a version of the Plug and Play service that contains a vulnerability in the way it handles user-supplied data.
An authenticated attacker could exploit this flaw by sending a malformed RPC request to the remote service and execute code within the SYSTEM context.
SolutionMicrosoft has released a set of patches for Windows 2000 and XP.