Published: 29/11/2005 Updated: 12/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple integer overflows in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allow remote malicious users to execute arbitrary code via crafted Windows Metafile (WMF) and Enhanced Metafile (EMF) format images that lead to heap-based buffer overflows, as demonstrated using MRBP16::bCheckRecord.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft windows xp
microsoft windows 2003 server itanium
microsoft windows 2003 server r2
microsoft windows 2003 server sp1
microsoft windows 2000
microsoft windows 2003 server 64-bit

/* * Author: Winny Thomas * Pune, INDIA * * The crafted metafile (WMF) from this code when viewed in explorer crashes it The issue is seen * when the field 'mtNoObjects' in the Metafile header is set to 0x0000 * The code was tested on Windows 2000 server SP4 The issue does not occur with the * hotfix for GDI (MS05-053) installed ...

NVD-CWE-Other http://www.eeye.com/html/research/advisories/AD20051108b.html http://www.kb.cert.org/vuls/id/300549 http://www.securityfocus.com/bid/15352 http://securitytracker.com/id?1015168 http://secunia.com/advisories/17498 http://support.avaya.com/elmodocs2/security/ASA-2005-228.pdf http://secunia.com/advisories/17461 http://secunia.com/advisories/17223 http://www.us-cert.gov/cas/techalerts/TA05-312A.html http://www.vupen.com/english/advisories/2005/2348 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A701 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1546 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1263 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1175 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1063 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-053 https://nvd.nist.gov https://www.exploit-db.com/exploits/1346/https://www.kb.cert.org/vuls/id/300549

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2005-2123

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect