CVE-2005-0904: Microsoft Windows XP

Low severity, CVSS 2.1. EPSS: 7% chance of exploitation in the next 30 days.

Remote Desktop in Windows XP SP1 does not verify the "Force shutdown from a remote system" setting, which allows remote attackers to shut down the system by executing TSShutdn.exe.

Affected products

• Microsoft Windows XP: any version

Published 2005-05-02. Last modified 2026-06-16.