PT-2005-1478 · Microsoft · Windows 2000+3

Yuji Ukai · Published 2005-02-14 · Updated 2019-04-30 · CVE-2005-0416

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Windows NT Windows 2000 through SP4 Windows XP through SP1 Windows 2003

Description The issue allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, leading to a stack-based buffer overflow in the Windows Animated Cursor (ANI) capability.

Recommendations For Windows NT, consider applying security patches or updates to fix the issue. For Windows 2000 through SP4, update to a newer service pack or apply a security patch. For Windows XP through SP1, update to a newer service pack or apply a security patch. For Windows 2003, consider applying security patches or updates to fix the issue.

Exploit

Fix

Related Identifiers

CVE-2005-0416

Affected Products

Windows 2000

Windows 2003

Windows Nt

Windows Xp

References · 9

• 🔥 http://securityfocus.com/bid/12233 · Exploit
• 🔥 https://exploit-db.com/exploits/765 · Exploit
• 🔥 https://exploit-db.com/exploits/771 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0416 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-002 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18879 · Note
• http://eeye.com/html/research/advisories/AD20050111.html · Note
• http://marc.info/?l=bugtraq&m=110547079218397&w=2 · Note
• http://marc.info/?l=bugtraq&m=110556975827760&w=2 · Note