CVE-2004-1305 The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame num...
MediumCVSS 5.0
EPSS 58.6%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nortel ip softphone 2050 | All versions | No fix listed |
| nortel media communication server 5100 | = 3.0 | No fix listed |
| nortel media communication server 5200 | = 3.0 | No fix listed |
| nortel media processing server | All versions | No fix listed |
| nortel periphonics | All versions | No fix listed |
| nortel symposium agent | All versions | No fix listed |
| nortel symposium network control center | All versions | No fix listed |
| nortel symposium tapi service provider | All versions | No fix listed |
| nortel symposium web centre portal | All versions | No fix listed |
| nortel symposium web client | All versions | No fix listed |
| nortel symposium call center server | All versions | No fix listed |
| nortel symposium express call center | All versions | No fix listed |
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | = enterprise | No fix listed |
| Microsoft windows 2003 server | = enterprise_64-bit | No fix listed |
| Microsoft windows 2003 server | = r2 | No fix listed |
| Microsoft windows 2003 server | = standard | No fix listed |
| Microsoft windows 2003 server | = web | No fix listed |
| Microsoft windows 98 | All versions | No fix listed |
| Microsoft windows 98se | All versions | No fix listed |
| Microsoft windows me | All versions | No fix listed |
| Microsoft windows nt | = 4.0 | No fix listed |
| Microsoft windows nt | = 4.0-sp1 | No fix listed |
| Microsoft windows nt | = 4.0-sp2 | No fix listed |
| Microsoft windows nt | = 4.0-sp3 | No fix listed |
Show 5 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows nt | = 4.0-sp4 | No fix listed |
| Microsoft windows nt | = 4.0-sp5 | No fix listed |
| Microsoft windows nt | = 4.0-sp6 | No fix listed |
| Microsoft windows nt | = 4.0-sp6a | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 20041223 Microsoft Windows Kernel ANI File Parsing Crash and DOS Vulnerability mailing-list
- VU#177584 patch third-party-advisory us-government-resource
- VU#697136 patch third-party-advisory us-government-resource
- TA05-012A patch third-party-advisory us-government-resource
- www.xfocus.net vendor-advisory
- MS05-002 vendor-advisory
- win-ani-ratenumber-dos(18667) vdb-entry
- oval:org.mitre.oval:def:1304 signature vdb-entry
- oval:org.mitre.oval:def:2580 signature vdb-entry
- oval:org.mitre.oval:def:3216 signature vdb-entry
- oval:org.mitre.oval:def:3957 signature vdb-entry
- oval:org.mitre.oval:def:712 signature vdb-entry