CVE-2005-2679: Sysinternals Process Explorer

High severity, CVSS 10.0. EPSS: 3.5% chance of exploitation in the next 30 days.

Buffer overflow in Sysinternals Process Explorer 9.23, and other versions before 9.25, allows local users to execute arbitrary code via a long CompanyName field in the VersionInfo information in a running process.

Affected products

• Sysinternals Process Explorer: version 9.23.0.0 only

Published 2005-08-23. Last modified 2026-06-16.