CVE-2004-1305
Last modified
CVE-2004-1305 is a vulnerability of currently unknown severity. The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.. EPSS estimates a 62.36% chance of exploitation in the next 30 days.
Description
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.
Metrics
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Nortel | Ip Softphone 2050 | All versions | — |
| Nortel | Media Communication Server 5100 | 3.0 | — |
| Nortel | Media Communication Server 5200 | 3.0 | — |
| Nortel | Media Processing Server | All versions | — |
| Nortel | Periphonics | All versions | — |
| Nortel | Symposium Agent | All versions | — |
| Nortel | Symposium Network Control Center | All versions | — |
| Nortel | Symposium Tapi Service Provider | All versions | — |
| Nortel | Symposium Web Centre Portal | All versions | — |
| Nortel | Symposium Web Client | All versions | — |
| Nortel | Symposium Call Center Server | All versions | — |
| Nortel | Symposium Express Call Center | All versions | — |
| Microsoft | Windows 2000 | All versions | — |
| Microsoft | Windows 2003 Server | enterprise | — |
| Microsoft | Windows 2003 Server | enterprise_64-bit | — |
| Microsoft | Windows 2003 Server | r2 | — |
| Microsoft | Windows 2003 Server | standard | — |
| Microsoft | Windows 2003 Server | web | — |
| Microsoft | Windows 98 | All versions | Gold |
| Microsoft | Windows 98se | All versions | — |
| Microsoft | Windows Me | All versions | — |
| Microsoft | Windows Nt | 4.0 | — |
| Microsoft | Windows Xp | All versions | — |
References
- http://www.kb.cert.org/vuls/id/177584Patch, Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/697136Patch, Third Party Advisory, US Government Resource
- http://www.us-cert.gov/cas/techalerts/TA05-012A.htmlPatch, Third Party Advisory, US Government Resource
- http://www.xfocus.net/flashsky/icoExp/Vendor Advisory
- http://www.kb.cert.org/vuls/id/177584Patch, Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/697136Patch, Third Party Advisory, US Government Resource
- http://www.us-cert.gov/cas/techalerts/TA05-012A.htmlPatch, Third Party Advisory, US Government Resource
- http://www.xfocus.net/flashsky/icoExp/Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2004-1305?
How severe is CVE-2004-1305?
How do I fix CVE-2004-1305?
Are you affected by CVE-2004-1305?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST