PT-2005-1832 · Microsoft · Windows 2000+1

Hongzen Zhou · Publicado 2005-03-20 · Atualizado 2019-04-30 · CVE-2005-0803

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Windows 2000

Description The issue concerns a denial of service that can be triggered by a crafted Enhanced Metafile (EMF) file. This file can cause invalid offsets to be used, specifically end, emreof, or palent offsets, leading to an application crash. The estimated number of potentially affected devices worldwide is not specified.

Recommendations For Windows 2000, apply the patch provided by Microsoft to fix the GetEnhMetaFilePaletteEntries API issue in GDI32.DLL.

Exploit

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2005-0803

Produtos afetados

Gdi32.Dll

Windows 2000

Referências · 21

• 🔥 https://exploit-db.com/exploits/25231 · Exploit
• 🔥 http://securityfocus.com/bid/12834 · Exploit
• 🔥 https://exploit-db.com/exploits/1346 · Exploit
• http://secunia.com/advisories/17223 · Aviso do Fabricante
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-053 · Aviso do Fabricante
• http://kb.cert.org/vuls/id/134756 · Nota
• http://secunia.com/advisories/17461 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1121 · Nota
• http://secunia.com/advisories/14631 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19727 · Nota
• http://marc.info/?l=bugtraq&m=111108743527497&w=2 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A671 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1152 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1215 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0803 · Nota de Segurança