high7.5Public exploit code
CVE-2005-1219
Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile fo…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows - Color Management Module Overflow (MS05-036) (2)2006-02-17 · remote · windows · Verified
- Microsoft Windows - Color Management Module Overflow (MS05-036) (1)2005-07-21 · dos · windows · Verified
Impact
Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Image Color Management | All versions |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/16004/
- http://www.kb.cert.org/vuls/id/720742
- http://www.securityfocus.com/bid/14214
- http://www.us-cert.gov/cas/techalerts/TA05-193A.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-036
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1125
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1280
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A330
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A440
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A769
- http://secunia.com/advisories/16004/
- http://www.kb.cert.org/vuls/id/720742
- http://www.securityfocus.com/bid/14214
- http://www.us-cert.gov/cas/techalerts/TA05-193A.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-036
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1125
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1280
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A330
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A440
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A769