Intrusion PreventionMS.RPC.Spoolss.Buffer.Overflow
Description
This indicates a possible attempt to exploit a buffer-overflow vulnerability in the Print Spooler service (Spoolsv.exe) in various Microsoft Windows versions.
The vulnerability may allow remote attackers to execute arbitrary code via a specially crafted message.
Affected Products
Microsoft Windows 2000 SP4
Microsoft Windows XP SP1
Microsoft Windows Server 2003 SP1 and earlier service packs
Impact
System compromise.
Recommended Actions
Apply the security patch to the system, as given in the Microsoft bulletin MS05-043: http://www.microsoft.com/technet/security/Bulletin/MS05-043.mspx
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2020-09-23 | 16.931 | Sig Added |
| ID | 10904 |
| Created | Sep 16, 2005 |
| Updated | Apr 17, 2023 |
| Risk |
|
| CVE ID | CVE-2005-1984 |
| Exploit Prediction Score | 84.05% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |