Published: 02/05/2005 Updated: 30/04/2019

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 510

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote malicious users to cause a denial of service (application crash) via a crafted Enhanced Metafile (EMF) file that causes invalid (1) end, (2) emreof, or (3) palent offsets to be used, aka "Enhanced Metafile Vulnerability."

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft windows 2000

/* * Author: Winny Thomas * Pune, INDIA * * The crafted metafile (WMF) from this code when viewed in explorer crashes it The issue is seen * when the field 'mtNoObjects' in the Metafile header is set to 0x0000 * The code was tested on Windows 2000 server SP4 The issue does not occur with the * hotfix for GDI (MS05-053) installed ...

source: wwwsecurityfocuscom/bid/12834/info Reportedly, a denial of service vulnerability affects Microsoft Windows GDI library 'gdi32dll' This issue is due to a failure of the application to securely copy data from malformed EMF image files An attacker may leverage this issue to trigger a denial of service condition in software implem ...

CWE-399 http://www.securityfocus.com/bid/12834 http://secunia.com/advisories/14631 http://securitytracker.com/id?1015168 http://www.kb.cert.org/vuls/id/134756 http://www.osvdb.org/20580 http://support.avaya.com/elmodocs2/security/ASA-2005-228.pdf http://secunia.com/advisories/17461 http://secunia.com/advisories/17223 http://www.us-cert.gov/cas/techalerts/TA05-312A.html http://www.vupen.com/english/advisories/2005/2348 http://marc.info/?l=bugtraq&m=111108743527497&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/19727 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A671 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1240 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1215 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1152 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1121 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-053 https://nvd.nist.gov https://www.exploit-db.com/exploits/1346/https://www.kb.cert.org/vuls/id/134756

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2005-0803

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect