Published: 29/11/2005 Updated: 12/10/2018

CVSS v2 Base Score: 7.6 | Impact Score: 10 | Exploitability Score: 4.9

VMScore: 770

Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C

Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1, related to "An unchecked buffer" and possibly buffer overflows, allows remote malicious users to execute arbitrary code via a crafted Windows Metafile (WMF) format image, aka "Windows Metafile Vulnerability."

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft windows 2003 server sp1
microsoft windows xp
microsoft windows 2003 server 64-bit
microsoft windows 2003 server itanium
microsoft windows 2003 server r2
microsoft windows 2000

/* * Author: Winny Thomas * Pune, INDIA * * The crafted metafile (WMF) from this code when viewed in explorer crashes it The issue is seen * when the field 'mtNoObjects' in the Metafile header is set to 0x0000 * The code was tested on Windows 2000 server SP4 The issue does not occur with the * hotfix for GDI (MS05-053) installed ...

/* * Author: Winny Thomas * Pune, INDIA * * The crafted metafile from this code when viewed in internet explorer raises the CPU utilization * to 100% The code was tested on Windows 2000 server SP4 The issue does not occur with the * hotfix for GDI (MS05-053) installed * * Disclaimer: This code is for educational/testing purposes by a ...

NVD-CWE-Other http://www.eeye.com/html/research/advisories/AD20051108b.html http://www.kb.cert.org/vuls/id/433341 http://securitytracker.com/id?1015168 http://www.eeye.com/html/research/advisories/AD20051108a.html http://www.securityfocus.com/bid/15356 http://secunia.com/advisories/17498 http://support.avaya.com/elmodocs2/security/ASA-2005-228.pdf http://secunia.com/advisories/17461 http://secunia.com/advisories/17223 http://www.us-cert.gov/cas/techalerts/TA05-312A.html http://securityreason.com/securityalert/161 http://www.vupen.com/english/advisories/2005/2348 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-053 https://nvd.nist.gov https://www.exploit-db.com/exploits/1346/https://www.kb.cert.org/vuls/id/433341

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2005-2124

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect