CVE-2005-0416
Last modified
CVE-2005-0416 is a vulnerability of currently unknown severity. The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow.. EPSS estimates a 45.49% chance of exploitation in the next 30 days.
Description
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow.
Metrics
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Microsoft | Windows 2000 | All versions | — |
| Microsoft | Windows 2003 Server | enterprise | — |
| Microsoft | Windows 2003 Server | enterprise_64-bit | — |
| Microsoft | Windows 2003 Server | r2 | — |
| Microsoft | Windows 2003 Server | standard | — |
| Microsoft | Windows 2003 Server | web | — |
| Microsoft | Windows 98 | All versions | Gold |
| Microsoft | Windows 98se | All versions | — |
| Microsoft | Windows Me | All versions | — |
| Microsoft | Windows Nt | 4.0 | — |
| Microsoft | Windows Xp | All versions | — |
References
- http://www.securityfocus.com/bid/12233Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/12233Exploit, Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-0416?
How severe is CVE-2005-0416?
How do I fix CVE-2005-0416?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-0410SQL injection vulnerability in importcc.php for CitrusDB 0.3…
- CVE-2005-0411Directory traversal vulnerability in index.php for CitrusDB …
- CVE-2005-0412Cross-site scripting (XSS) vulnerability in Spidean PostWrap…
- CVE-2005-0413Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 al…
- CVE-2005-0414SQL injection vulnerability in post.php for MercuryBoard 1.1…
- CVE-2005-0415Multiple memory leaks in the MQL parser in Emdros before 1.1…
- CVE-2005-0417Unknown "high risk" vulnerability in DB2 Universal Database …
- CVE-2005-0418Argument injection vulnerability in Java Web Start for J2SE …
- CVE-2005-0419Multiple heap-based buffer overflows in 3Com 3CServer allow …
- CVE-2005-0420Microsoft Outlook Web Access (OWA), when used with Exchange,…
- CVE-2005-0421DelphiTurk FTP 1.0 stores usernames and passwords in the pro…
- CVE-2005-0422DelphiTurk CodeBank (aka KodBank) 3.1 and earlier stores use…
Are you affected by CVE-2005-0416?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST