PT-2005-1832 · Microsoft · Windows 2000+1

Hongzen Zhou · Published 2005-03-20 · Updated 2019-04-30 · CVE-2005-0803

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Windows 2000

Description The issue concerns a denial of service that can be triggered by a crafted Enhanced Metafile (EMF) file. This file can cause invalid offsets to be used, specifically end, emreof, or palent offsets, leading to an application crash. The estimated number of potentially affected devices worldwide is not specified.

Recommendations For Windows 2000, apply the patch provided by Microsoft to fix the GetEnhMetaFilePaletteEntries API issue in GDI32.DLL.

Exploit

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2005-0803

Affected Products

Gdi32.Dll

Windows 2000

References · 21

• 🔥 https://exploit-db.com/exploits/25231 · Exploit
• 🔥 http://securityfocus.com/bid/12834 · Exploit
• 🔥 https://exploit-db.com/exploits/1346 · Exploit
• http://secunia.com/advisories/17223 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-053 · Vendor Advisory
• http://secunia.com/advisories/17461 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0803 · Security Note
• http://vupen.com/english/advisories/2005/2348 · Vendor Advisory
• http://kb.cert.org/vuls/id/134756 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1121 · Note
• http://secunia.com/advisories/14631 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19727 · Note
• http://marc.info/?l=bugtraq&m=111108743527497&w=2 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A671 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1152 · Note