CVE-2005-0416
Last modified
CVE-2005-0416 is a vulnerability of currently unknown severity. The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow.. EPSS estimates a 45.49% chance of exploitation in the next 30 days.
Description
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow.
Metrics
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Microsoft | Windows 2000 | All versions | — |
| Microsoft | Windows 2003 Server | enterprise | — |
| Microsoft | Windows 2003 Server | enterprise_64-bit | — |
| Microsoft | Windows 2003 Server | r2 | — |
| Microsoft | Windows 2003 Server | standard | — |
| Microsoft | Windows 2003 Server | web | — |
| Microsoft | Windows 98 | All versions | Gold |
| Microsoft | Windows 98se | All versions | — |
| Microsoft | Windows Me | All versions | — |
| Microsoft | Windows Nt | 4.0 | — |
| Microsoft | Windows Xp | All versions | — |
References
- http://www.securityfocus.com/bid/12233Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/12233Exploit, Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-0416?
How severe is CVE-2005-0416?
How do I fix CVE-2005-0416?
Are you affected by CVE-2005-0416?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST