Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2005-4560
HistoryDec 28, 2005 - 7:03 p.m.

CVE-2005-4560

2005-12-2819:03:00
CWE-20
[email protected]
web.nvd.nist.gov
28
windows
gdi32.dll
cve-2005-4560
remote code execution
wmf
shimgvw.dll
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.974 High

EPSS

Percentile

99.9%

JSON

The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbitrary code via a Windows Metafile (WMF) format image with a crafted SETABORTPROC GDI Escape function call, related to the Windows Picture and Fax Viewer (SHIMGVW.DLL), a different vulnerability than CVE-2005-2123 and CVE-2005-2124, and as originally discovered in the wild on unionseek.com.

Affected configurations

NVD
Node
microsoftwindows_2003_serverMatchenterprise64-bit
OR
microsoftwindows_2003_serverMatchenterprisesp1
OR
microsoftwindows_2003_serverMatchr264-bit
OR
microsoftwindows_2003_serverMatchr2sp1
OR
microsoftwindows_2003_serverMatchstandard64-bit
OR
microsoftwindows_2003_serverMatchstandardsp1
OR
microsoftwindows_2003_serverMatchweb
OR
microsoftwindows_2003_serverMatchwebsp1
OR
microsoftwindows_xphome
OR
microsoftwindows_xpmedia_center
OR
microsoftwindows_xpgoldprofessional
OR
microsoftwindows_xpsp1home
OR
microsoftwindows_xpsp1media_center
OR
microsoftwindows_xpsp2home
OR
microsoftwindows_xpsp2media_center
OR
microsoftwindows_xpsp2tablet_pc

References

Related

nvd 6
cvelist 6
ubuntucve 2
checkpoint_advisories 4
saint 4
securityvulns 7
packetstorm 1
nessus 2
canvas 1
cert 3
cve 5
prion 3
debiancve 1
nvd
nvd
CVE-2005-4560
2005-12-28 19:03:00
CVE-2006-0106
2006-01-06 18:03:00
CVE-2007-1211
2007-04-04 16:19:00
cvelist
cvelist
CVE-2005-4560
2005-12-28 19:00:00
CVE-2006-0106
2006-01-06 18:00:00
CVE-2006-0020
2006-01-10 21:00:00
ubuntucve
ubuntucve
CVE-2005-4560
2005-12-28 00:00:00
CVE-2006-0106
2006-01-06 00:00:00
checkpoint_advisories
checkpoint_advisories
WMF and EMF Files (CVE-2005-2123; CVE-2005-2124; CVE-2005-4560; CVE-2006-0020)
2006-02-22 00:00:00
Microsoft Windows WMF Handling Arbitrary Code Execution (CVE-2005-4560)
2010-03-22 00:00:00
Microsoft Windows Graphics Engine EMF and WMF Rendering (CVE-2005-2123; CVE-2005-2124)
2010-06-28 00:00:00
saint
saint
Windows WMF handling vulnerability
2005-12-30 00:00:00
Windows WMF handling vulnerability
2005-12-30 00:00:00
Windows WMF handling vulnerability
2005-12-30 00:00:00
securityvulns
securityvulns
Lotus Notes WMF File Handling Code Execution Vulnerability
2005-12-30 00:00:00
Microsoft Security Bulletin MS06-001 Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution (912919)
2006-01-07 00:00:00
US-CERT Technical Cyber Security Alert TA05-362A -- Microsoft Windows Metafile Handling Buffer Overflow
2005-12-29 00:00:00
packetstorm
packetstorm
Windows XP/2003/Vista Metafile Escape() SetAbortProc Code Execution
2009-11-26 00:00:00
nessus
nessus
MS06-001: Vulnerabilities in Graphics Rendering Engine Could Allow Code Execution (912919)
2006-01-05 00:00:00
MS05-053: Vulnerabilities in Graphics Rendering Engine Could Allow Code Execution (896424)
2005-11-08 00:00:00
canvas
canvas
Immunity Canvas: WMF_SETABORT
2005-12-28 19:03:00
cert
cert
Microsoft Windows Metafile handler SETABORTPROC GDI Escape vulnerability
2005-12-28 00:00:00
Microsoft Windows Graphics Rendering Engine buffer overflow vulnerability
2005-11-08 00:00:00
Microsoft Windows vulnerable to buffer overflow via specially crafted WMF file
2005-11-08 00:00:00
cve
cve
CVE-2007-1211
2007-04-04 16:19:00
CVE-2006-0020
2006-01-10 21:03:00
CVE-2006-0106
2006-01-06 18:03:00
prion
prion
Code injection
2006-01-06 18:03:00
Integer overflow
2006-01-10 21:03:00
Sql injection
2007-04-04 16:19:00
debiancve
debiancve
CVE-2006-0106
2006-01-06 18:03:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.974 High

EPSS

Percentile

99.9%

JSON
Related for CVE-2005-4560
nvd6cvelist6ubuntucve2checkpoint_advisories4saint4securityvulns7packetstorm1nessus2canvas1cert3cve5prion3debiancve1