CVE-2005-0050

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 46.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-02-08 · updated 2026-06-16
Weakness: CWE-20

Description

The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate the length of messages, which leads to an "unchecked buffer" and allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, aka the "License Logging Service Vulnerability."

Affected products

Microsoft Windows 2000: all versions
Microsoft Windows 2003 Server: 2000, 2003, enterprise, enterprise_64-bit, r2, standard (+1)
Microsoft Windows Nt: 4.0, 4.0-sp1, 4.0-sp2, 4.0-sp3, 4.0-sp4, 4.0-sp5 (+2)

References

http://www.kb.cert.org/vuls/id/130433
http://www.us-cert.gov/cas/techalerts/TA05-039A.html
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-010
https://exchange.xforce.ibmcloud.com/vulnerabilities/19101
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2568
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3582
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4786
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A644
http://www.kb.cert.org/vuls/id/130433
http://www.us-cert.gov/cas/techalerts/TA05-039A.html
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-010
https://exchange.xforce.ibmcloud.com/vulnerabilities/19101

Get alerted when CVE-2005-0050 or the next vulnerability affects your stack