CVE-2004-1305

The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.

• http://marc.info/?l=bugtraq&m=110382854111833&w=2
• http://www.kb.cert.org/vuls/id/177584Patch, Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/697136Patch, Third Party Advisory, US Government Resource
• http://www.us-cert.gov/cas/techalerts/TA05-012A.htmlPatch, Third Party Advisory, US Government Resource
• http://www.xfocus.net/flashsky/icoExp/Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-002
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18667
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1304
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2580
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3216
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3957
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A712
• http://marc.info/?l=bugtraq&m=110382854111833&w=2
• http://www.kb.cert.org/vuls/id/177584Patch, Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/697136Patch, Third Party Advisory, US Government Resource
• http://www.us-cert.gov/cas/techalerts/TA05-012A.htmlPatch, Third Party Advisory, US Government Resource
• http://www.xfocus.net/flashsky/icoExp/Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-002
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18667
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1304
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2580
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3216
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3957
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A712

Published

Dec 23, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1299Buffer overflow in the get_attr function in html.c for vilis…
• CVE-2004-1300Buffer overflow in the open_aiff_file function in demux_aiff…
• CVE-2004-1301Buffer overflow in the book_format_sql function in format.c …
• CVE-2004-1302The id3tag_sort function in id3tag.c for YAMT 0.5 allows rem…
• CVE-2004-1303Buffer overflow in the get function in get.c for Yanf 0.4 al…
• CVE-2004-1304Stack-based buffer overflow in the ELF header parsing code i…
• CVE-2004-1306Heap-based buffer overflow in winhlp32.exe in Windows NT, Wi…
• CVE-2004-1307Integer overflow in the TIFFFetchStripThing function in tif_…
• CVE-2004-1308Integer overflow in (1) tif_dirread.c and (2) tif_fax3.c for…
• CVE-2004-1309Heap-based buffer overflow in the demux_open_bmp function in…
• CVE-2004-1310Stack-based buffer overflow in the asf_mmst_streaming.c func…
• CVE-2004-1311Integer overflow in the real_setup_and_get_header function i…