CVE-2004-1305

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2004-1305
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
http://marc.info/?l=bugtraq&m=110382854111833&w=2
http://www.kb.cert.org/vuls/id/177584 Patch Third Party Advisory US Government Resource
http://www.kb.cert.org/vuls/id/697136 Patch Third Party Advisory US Government Resource
http://www.us-cert.gov/cas/techalerts/TA05-012A.html Patch Third Party Advisory US Government Resource
http://www.xfocus.net/flashsky/icoExp/ Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-002
https://exchange.xforce.ibmcloud.com/vulnerabilities/18667
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1304
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2580
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3216
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3957
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A712
http://marc.info/?l=bugtraq&m=110382854111833&w=2
http://www.kb.cert.org/vuls/id/177584 Patch Third Party Advisory US Government Resource
http://www.kb.cert.org/vuls/id/697136 Patch Third Party Advisory US Government Resource
http://www.us-cert.gov/cas/techalerts/TA05-012A.html Patch Third Party Advisory US Government Resource
http://www.xfocus.net/flashsky/icoExp/ Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-002
https://exchange.xforce.ibmcloud.com/vulnerabilities/18667
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1304
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2580
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3216
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3957
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A712
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:nortel:ip_softphone_2050:*:*:*:*:*:*:*:*
cpe:2.3:a:nortel:media_communication_server_5100:3.0:*:*:*:*:*:*:*
cpe:2.3:a:nortel:media_communication_server_5200:3.0:*:*:*:*:*:*:*
cpe:2.3:a:nortel:media_processing_server:*:*:*:*:*:*:*:*
cpe:2.3:a:nortel:periphonics:*:*:*:*:*:*:*:*
cpe:2.3:a:nortel:symposium_agent:*:*:*:*:*:*:*:*
cpe:2.3:a:nortel:symposium_network_control_center:*:*:*:*:*:*:*:*
cpe:2.3:a:nortel:symposium_tapi_service_provider:*:*:*:*:*:*:*:*
cpe:2.3:a:nortel:symposium_web_centre_portal:*:*:*:*:*:*:*:*
cpe:2.3:a:nortel:symposium_web_client:*:*:*:*:*:*:*:*
cpe:2.3:h:nortel:symposium_call_center_server:*:*:*:*:*:*:*:*
cpe:2.3:h:nortel:symposium_express_call_center:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*
cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*
History

20 Nov 2024, 23:50

Type Values Removed Values Added
References () http://marc.info/?l=bugtraq&m=110382854111833&w=2 - () http://marc.info/?l=bugtraq&m=110382854111833&w=2 -
References () http://www.kb.cert.org/vuls/id/177584 - Patch, Third Party Advisory, US Government Resource () http://www.kb.cert.org/vuls/id/177584 - Patch, Third Party Advisory, US Government Resource
References () http://www.kb.cert.org/vuls/id/697136 - Patch, Third Party Advisory, US Government Resource () http://www.kb.cert.org/vuls/id/697136 - Patch, Third Party Advisory, US Government Resource
References () http://www.us-cert.gov/cas/techalerts/TA05-012A.html - Patch, Third Party Advisory, US Government Resource () http://www.us-cert.gov/cas/techalerts/TA05-012A.html - Patch, Third Party Advisory, US Government Resource
References () http://www.xfocus.net/flashsky/icoExp/ - Vendor Advisory () http://www.xfocus.net/flashsky/icoExp/ - Vendor Advisory
References () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-002 - () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-002 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/18667 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/18667 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1304 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1304 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2580 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2580 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3216 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3216 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3957 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3957 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A712 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A712 -
Information

Published : 2004-12-23 05:00

Updated : 2024-11-20 23:50

NVD link : CVE-2004-1305

Mitre link : CVE-2004-1305

CVE.ORG link : CVE-2004-1305

JSON object : View

Products Affected

microsoft

  • windows_98
  • windows_2003_server
  • windows_me
  • windows_2000
  • windows_xp
  • windows_98se
  • windows_nt

nortel

  • symposium_express_call_center
  • symposium_network_control_center
  • ip_softphone_2050
  • symposium_call_center_server
  • symposium_web_client
  • periphonics
  • symposium_web_centre_portal
  • symposium_tapi_service_provider
  • symposium_agent
  • media_communication_server_5200
  • media_processing_server
  • media_communication_server_5100
CWE
NVD-CWE-Other

NetmanageIT Website NetmanageIT OSINT Web NetmanageIT OpenCTI NetmanageIT PDF Tools NetmanageIT CTO Corner Blog NetmanageIT Email Header Analyzer NetmanageIT Password Pusher NetmanageIT Internet Health and Latency Dashboard NetmanageIT Dedicated Speed Test Site NetmanageIT Ubuntu Mirror 10Gbps Copyright OpenCVE 2024