CVE-2005-3644

CVE-2005-3644 is a denial-of-service vulnerability affecting Microsoft Windows 2000 SP4 and earlier, and potentially Windows XP SP1 and earlier. Remote attackers can exploit a flaw in the UPnP PNP_GetDeviceList function by sending a crafted DCE RPC request with an excessively large output buffer size, leading to memory exhaustion. This vulnerability carries a high severity CVSS score of 7.8, indicating it can be exploited remotely with low complexity and no authentication, resulting in a complete loss of availability. While not listed on the KEV catalog, exploit code is publicly available via ExploitDB, though there is minimal community discussion or media coverage surrounding this older vulnerability.