high7.5Public exploit code
CVE-2005-0416
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execu…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Internet Explorer - '.ANI' Downloader (MS05-002)2005-01-24 · remote · windows · Verified
- Microsoft Internet Explorer - '.ANI' Universal (MS05-002)2005-01-22 · remote · windows · Verified
Impact
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 2000 | All versions |
| Microsoft | Windows 2003 Server | Versions enterprise, enterprise_64-bit, r2, standard, web |
| Microsoft | Windows 98 | All versions |
| Microsoft | Windows 98se | All versions |
| Microsoft | Windows Me | All versions |
| Microsoft | Windows Nt | Version 4.0 |
| Microsoft | Windows Xp | All versions |
References
- NVD record
- CVE.org record
- http://eeye.com/html/research/advisories/AD20050111.html
- http://marc.info/?l=bugtraq&m=110547079218397&w=2
- http://marc.info/?l=bugtraq&m=110556975827760&w=2
- http://www.securityfocus.com/bid/12233
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-002
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18879
- http://eeye.com/html/research/advisories/AD20050111.html
- http://marc.info/?l=bugtraq&m=110547079218397&w=2
- http://marc.info/?l=bugtraq&m=110556975827760&w=2
- http://www.securityfocus.com/bid/12233
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-002
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18879