CVE-2005-2120
6.5
CVSS v2.0 Base Score
75.72%
HIGH RiskEPSS (99th percentile)
NVD-CWE-Other
Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "\" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call.
Published: 10/13/2005
Modified: 4/16/2026
Vulnerability Summary
CVSS v2 Score
6.5
AV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS Score (Exploitation Probability)
75.72%HIGH Exploitation Risk
99th percentile
This vulnerability has a 75.72% probability of being exploited in the next 30 days, ranking higher than 99% of all scored CVEs.
CWE Classification
NVD-CWE-Other