CVEvulnerability
CVE-2005-2124
7.6 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-11-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.6 HIGH — AV:N/AC:H/Au:N/C:C/I:C/A:C
Description
Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1, related to "An unchecked buffer" and possibly buffer overflows, allows remote attackers to execute arbitrary code via a crafted Windows Metafile (WMF) format image, aka "Windows Metafile Vulnerability."
Affected configurations
• microsoft windows 2000
• microsoft windows 2003 server 64-bit
• microsoft windows 2003 server itanium
• microsoft windows 2003 server r2
• microsoft windows 2003 server sp1
• microsoft windows xp
References
- http://secunia.com/advisories/17223 secunia.com
- http://secunia.com/advisories/17461 secunia.com
- http://secunia.com/advisories/17498 secunia.com
- http://securityreason.com/securityalert/161 securityreason.com
- http://securitytracker.com/id?1015168 securitytracker.com
- http://support.avaya.com/elmodocs2/security/ASA-2005-228.pdf support.avaya.com
- http://www.eeye.com/html/research/advisories/AD20051108a.html www.eeye.com
- http://www.eeye.com/html/research/advisories/AD20051108b.html Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/433341 Patch, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/15356 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA05-312A.html US Government Resource
- http://www.vupen.com/english/advisories/2005/2348 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-053 docs.microsoft.com
- http://secunia.com/advisories/17223 secunia.com
- http://secunia.com/advisories/17461 secunia.com
- http://secunia.com/advisories/17498 secunia.com
- http://securityreason.com/securityalert/161 securityreason.com
- http://securitytracker.com/id?1015168 securitytracker.com
- http://support.avaya.com/elmodocs2/security/ASA-2005-228.pdf support.avaya.com
- http://www.eeye.com/html/research/advisories/AD20051108a.html www.eeye.com
- http://www.eeye.com/html/research/advisories/AD20051108b.html Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/433341 Patch, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/15356 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA05-312A.html US Government Resource
- http://www.vupen.com/english/advisories/2005/2348 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-053 docs.microsoft.com