CVE-2005-1219

Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags.

Score

CVSS 2.0 7.5 High

Status

Modified - secure@microsoft.com

Published

2005-07-12

Last modified

2024-08-07

Affected products

• Image Color Management (Microsoft)

References

• http://secunia.com/advisories/16004/
• http://www.kb.cert.org/vuls/id/720742
• http://www.securityfocus.com/bid/14214
• http://www.us-cert.gov/cas/techalerts/TA05-193A.html
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-036
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1125
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1280
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A330
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A440
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A769