CVE-2005-0803 The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service (application crash) via a crafted Enhanced Metafile (EMF) file that causes invali...
MediumCVSS 5.0
EPSS 67.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service (application crash) via a crafted Enhanced Metafile (EMF) file that causes invalid (1) end, (2) emreof, or (3) palent offsets to be used, aka "Enhanced Metafile Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
References
- 20050317 Windows 2000 GDI32.DLL GetEnhMetaFilePaletteEntries() API specially crafted EMF file DOS vulnerability mailing-list
- 14631 third-party-advisory
- 17223 third-party-advisory vendor-advisory
- 17461 third-party-advisory vendor-advisory
- 1015168 vdb-entry
- support.avaya.com
- VU#134756 third-party-advisory us-government-resource
- 20580 vdb-entry
- 12834 exploit vdb-entry
- TA05-312A third-party-advisory us-government-resource
- ADV-2005-2348 vdb-entry vendor-advisory
- MS05-053 vendor-advisory
- win-2000-gdi32dll-dos(19727) vdb-entry
- oval:org.mitre.oval:def:1121 signature vdb-entry
- oval:org.mitre.oval:def:1152 signature vdb-entry
- oval:org.mitre.oval:def:1215 signature vdb-entry
- oval:org.mitre.oval:def:1240 signature vdb-entry
- oval:org.mitre.oval:def:671 signature vdb-entry