CVE-2005-2765

Severity CVSS v4.0:

Pending analysis

Type:

Unavailable / Other

Publication date:

01/09/2005

Last modified:

03/04/2025

Description

The user interface in the Windows Firewall does not properly display certain malformed entries in the Windows Registry, which makes it easier for attackers with administrator privileges to hide activities if the administrator only uses the Windows Firewall interface to monitor exceptions. NOTE: the vendor disputes this issue, saying that since administrative privileges are already required, it is not a vulnerability. CVE has not yet formally decided if such "information hiding" issues should be included.

Impact

Vector 2.0

AV:L/AC:L/Au:N/C:N/I:P/A:N CVSS v2.0 Severity and Metrics:

Base Score: 2.10 LOW
Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N

Attack Vector (AV): Local
Attack Complexity (AC): Low
Authentication (Au): None
Confidentiality (C): None
Integrity (I): Physical
Availability (A): None

Base Score 2.0

2.10

Severity 2.0

LOW

Vulnerable products and versions

CPE	From	Up to
cpe:2.3:o:microsoft:windows_2003_server:64-bit:::::::*
cpe:2.3:o:microsoft:windows_2003_server:sp1:::::::*
cpe:2.3:o:microsoft:windows_xp:::64-bit:::::*
cpe:2.3:o:microsoft:windows_xp::sp2:tablet_pc:::::

To consult the complete list of CPE names with products and versions, see this page

CPE	From	Up to
cpe:2.3:o:microsoft:windows_2003_server:64-bit:::::::*
cpe:2.3:o:microsoft:windows_2003_server:sp1:::::::*
cpe:2.3:o:microsoft:windows_xp:::64-bit:::::*
cpe:2.3:o:microsoft:windows_xp::sp2:tablet_pc:::::

CVE-2005-2765

Description

Impact

Vulnerable products and versions

References to Advisories, Solutions, and Tools