PT-2005-1180 · Microsoft · Windows Server 2003+2

John Heasman · Published 2005-04-13 · Updated 2019-04-30 · CVE-2005-0060

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 2000, XP SP1, XP SP2, and Server 2003

Description A buffer overflow issue exists in the font processing component, allowing local users to gain privileges through a specially-designed application.

Recommendations For Microsoft Windows 2000, consider applying security patches or updates to fix the issue. For Microsoft Windows XP SP1 and SP2, apply the recommended security updates to resolve the problem. For Microsoft Windows Server 2003, install the available patch to mitigate the risk of exploitation.

Fix

Related Identifiers

CVE-2005-0060

Affected Products

Windows 2000

Windows Server 2003

Windows Xp

References · 8

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-018 · Vendor Advisory
• http://ngssoftware.com/advisories/ms-01.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0060 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2562 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2731 · Note
• http://marc.info/?l=bugtraq&m=111343529426926&w=2 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3941 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4797 · Note