CVE-2005-0551: Microsoft Windows 2000

High severity, CVSS 10.0. EPSS: 20.3% chance of exploitation in the next 30 days.

Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application that provides console window information with a long FaceName value.

Affected products

• Microsoft Windows 2000: any version
• Microsoft Windows 2003 Server: version r2 only
• Microsoft Windows XP: any version

Published 2005-05-02. Last modified 2026-06-16.