CVE-2005-3197

Stack-based buffer overflow in PWIWrapper.dll for Webroot Desktop Firewall before 1.3.0build52 allows local users to execute arbitrary code as SYSTEM by sending a crafted DeviceIoControl command, then removing an allowed program from the firewall list.

• http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0129.html
• http://secunia.com/advisories/15745/Patch, Vendor Advisory
• http://secunia.com/secunia_research/2005-10/advisory/Patch, Vendor Advisory
• http://securitytracker.com/id?1015012
• http://support.webroot.com/ics/support/KBAnswer.asp?questionID=2332
• http://www.osvdb.org/19868
• http://www.securityfocus.com/bid/15016Patch
• http://www.vupen.com/english/advisories/2005/1973
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22529
• http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0129.html
• http://secunia.com/advisories/15745/Patch, Vendor Advisory
• http://secunia.com/secunia_research/2005-10/advisory/Patch, Vendor Advisory
• http://securitytracker.com/id?1015012
• http://support.webroot.com/ics/support/KBAnswer.asp?questionID=2332
• http://www.osvdb.org/19868
• http://www.securityfocus.com/bid/15016Patch
• http://www.vupen.com/english/advisories/2005/1973
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22529

Published

Oct 14, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3191Multiple heap-based buffer overflows in the (1) DCTStream::r…
• CVE-2005-3192Heap-based buffer overflow in the StreamPredictor function i…
• CVE-2005-3193Heap-based buffer overflow in the JPXStream::readCodestream …
• CVE-2005-3194Multiple buffer overflows in ALZip 6.12 (Korean), 6.1 (Inter…
• CVE-2005-3195Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2005-3196Planet Technology Corp FGSW2402RS switch with firmware 1.2 h…
• CVE-2005-3198Webroot Desktop Firewall before 1.3.0build52 allows local us…
• CVE-2005-3199Multiple SQL injection vulnerabilities in aradmin.asp for as…
• CVE-2005-3200Multiple cross-site scripting (XSS) vulnerabilities in Utopi…
• CVE-2005-3201SQL injection vulnerability in news.php for Utopia News Pro …
• CVE-2005-3202Multiple cross-site scripting (XSS) vulnerabilities in Oracl…
• CVE-2005-3203The manual installation of Oracle HTML DB (HTMLDB) 1.3 throu…