PT-2005-3061 · Microsoft · Windows Server 2003+3

Peter Ferrie · Publicado 2005-11-29 · Atualizado 2018-10-12 · CVE-2005-2124

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Windows 2000 SP4 Windows XP SP1 Windows XP SP2 Windows Server 2003 SP1

Description: The issue is related to an unspecified vulnerability in the Graphics Rendering Engine, specifically in the GDI32.DLL component, which is associated with an unchecked buffer and possibly buffer overflows. This allows remote attackers to execute arbitrary code via a crafted Windows Metafile (WMF) format image.

Recommendations: For Windows 2000 SP4, update to a version that includes the fix for this issue. For Windows XP SP1, update to a version that includes the fix for this issue. For Windows XP SP2, update to a version that includes the fix for this issue. For Windows Server 2003 SP1, update to a version that includes the fix for this issue.

Exploit

Correção

Identificadores relacionados

CVE-2005-2124

Produtos afetados

Gdi32.Dll

Windows 2000

Windows Server 2003

Windows Xp

Referências · 16

• 🔥 https://exploit-db.com/exploits/1343 · Exploit
• 🔥 https://exploit-db.com/exploits/1346 · Exploit
• http://support.avaya.com/elmodocs2/security/ASA-2005-228.pdf · Nota
• http://secunia.com/advisories/17498 · Nota
• http://secunia.com/advisories/17223 · Nota
• http://kb.cert.org/vuls/id/433341 · Correção
• http://securitytracker.com/id?1015168 · Nota
• http://vupen.com/english/advisories/2005/2348 · Nota
• http://securityfocus.com/bid/15356 · Nota
• http://secunia.com/advisories/17461 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2124 · Nota de Segurança
• http://securityreason.com/securityalert/161 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-053 · Aviso do Fabricante
• http://eeye.com/html/research/advisories/AD20051108b.html · Aviso do Fabricante
• http://eeye.com/html/research/advisories/AD20051108a.html · Nota