NetSight
IP …
medium5.0Public exploit code

CVE-2004-1305

The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.

Affected products

VendorProductAffected versions
NortelIp Softphone 2050
All versions
NortelMedia Communication Server 5100
Version 3.0
NortelMedia Communication Server 5200
Version 3.0
NortelMedia Processing Server
All versions
NortelPeriphonics
All versions
NortelSymposium Agent
All versions
NortelSymposium Network Control Center
All versions
NortelSymposium Tapi Service Provider
All versions
NortelSymposium Web Centre Portal
All versions
NortelSymposium Web Client
All versions
NortelSymposium Call Center Server
All versions
NortelSymposium Express Call Center
All versions

References