CVE-2004-1305
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.
- Score
- CVSS 2.0 5.0 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2004-12-23
- Last modified
- 2024-08-08
Affected products
- Windows 2000 (Microsoft)
- Windows 2003 Server (Microsoft)
- Windows 98 (Microsoft)
- Windows 98se (Microsoft)
- Windows Me (Microsoft)
- Windows Nt (Microsoft)
- Windows Xp (Microsoft)
- Ip Softphone 2050 (Nortel)
- Media Communication Server 5100 (Nortel)
- Media Communication Server 5200 (Nortel)
- Media Processing Server (Nortel)
- Periphonics (Nortel)
- Symposium Agent (Nortel)
- Symposium Call Center Server (Nortel)
- Symposium Express Call Center (Nortel)
- Symposium Network Control Center (Nortel)
- Symposium Tapi Service Provider (Nortel)
- Symposium Web Centre Portal (Nortel)
- Symposium Web Client (Nortel)
References
- http://marc.info/?l=bugtraq&m=110382854111833&w=2
- http://www.kb.cert.org/vuls/id/177584
- http://www.kb.cert.org/vuls/id/697136
- http://www.us-cert.gov/cas/techalerts/TA05-012A.html
- http://www.xfocus.net/flashsky/icoExp/
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-002
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18667
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1304
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2580
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3216
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3957
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A712
