eEye Security Advisory – eEye Digital Security has discovered a vulnerability in the Windows Plug and Play Service that would allow an unprivileged user to execute arbitrary code with SYSTEM privileges on a remote Windows 2000 or XP SP1 system. On Windows XP SP2, this vulnerability could be exploited by an unprivileged user to gain full privileges on a system to which he is logged in interactively.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/40631/EEYEB-20050803.txt
Source: https://packetstormsecurity.com/files/40631/EEYEB-20050803.txt.html