CVEvulnerability
CVE-2005-0416
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-04-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow.
Affected configurations
• microsoft windows 2000
• microsoft windows 2003 server enterprise
• microsoft windows 2003 server enterprise 64-bit
• microsoft windows 2003 server r2
• microsoft windows 2003 server standard
• microsoft windows 2003 server web
• microsoft windows 98
• microsoft windows 98se
• microsoft windows me
• microsoft windows nt 4.0
• microsoft windows xp
References
- http://eeye.com/html/research/advisories/AD20050111.html eeye.com
- http://marc.info/?l=bugtraq&m=110547079218397&w=2 marc.info
- http://marc.info/?l=bugtraq&m=110556975827760&w=2 marc.info
- http://www.securityfocus.com/bid/12233 Exploit, Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-002 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18879 exchange.xforce.ibmcloud.com
- http://eeye.com/html/research/advisories/AD20050111.html eeye.com
- http://marc.info/?l=bugtraq&m=110547079218397&w=2 marc.info
- http://marc.info/?l=bugtraq&m=110556975827760&w=2 marc.info
- http://www.securityfocus.com/bid/12233 Exploit, Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-002 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18879 exchange.xforce.ibmcloud.com