PT-2005-1478 · Microsoft · Windows 2000+3

Yuji Ukai · Publicado 2005-02-14 · Atualizado 2019-04-30 · CVE-2005-0416

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Windows NT Windows 2000 through SP4 Windows XP through SP1 Windows 2003

Description The issue allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, leading to a stack-based buffer overflow in the Windows Animated Cursor (ANI) capability.

Recommendations For Windows NT, consider applying security patches or updates to fix the issue. For Windows 2000 through SP4, update to a newer service pack or apply a security patch. For Windows XP through SP1, update to a newer service pack or apply a security patch. For Windows 2003, consider applying security patches or updates to fix the issue.

Exploit

Correção

Identificadores relacionados

CVE-2005-0416

Produtos afetados

Windows 2000

Windows 2003

Windows Nt

Windows Xp

Referências · 9

• 🔥 http://securityfocus.com/bid/12233 · Exploit
• 🔥 https://exploit-db.com/exploits/765 · Exploit
• 🔥 https://exploit-db.com/exploits/771 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18879 · Nota
• http://eeye.com/html/research/advisories/AD20050111.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0416 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=110547079218397&w=2 · Nota
• http://marc.info/?l=bugtraq&m=110556975827760&w=2 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-002 · Aviso do Fabricante