CVE-2005-2123 Multiple integer overflows in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allow remote attackers to execute arbitrary code via crafted Windows Me...
HighCVSS 7.5
EPSS 61.5%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Multiple integer overflows in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allow remote attackers to execute arbitrary code via crafted Windows Metafile (WMF) and Enhanced Metafile (EMF) format images that lead to heap-based buffer overflows, as demonstrated using MRBP16::bCheckRecord.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | = 64-bit | No fix listed |
| Microsoft windows 2003 server | = itanium | No fix listed |
| Microsoft windows 2003 server | = r2 | No fix listed |
| Microsoft windows 2003 server | = sp1 | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 17223 third-party-advisory
- 17461 third-party-advisory
- 17498 third-party-advisory
- 1015168 vdb-entry
- support.avaya.com
- www.eeye.com patch vendor-advisory
- VU#300549 patch third-party-advisory us-government-resource
- 15352 vdb-entry
- TA05-312A third-party-advisory us-government-resource
- ADV-2005-2348 vdb-entry
- MS05-053 vendor-advisory
- oval:org.mitre.oval:def:1063 signature vdb-entry
- oval:org.mitre.oval:def:1175 signature vdb-entry
- oval:org.mitre.oval:def:1263 signature vdb-entry
- oval:org.mitre.oval:def:1546 signature vdb-entry
- oval:org.mitre.oval:def:701 signature vdb-entry