CVE-2005-2124

🗓️ 29 Nov 2005 21:00:00Reported by microsoftType

Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1, related to "An unchecked buffer" and possibly buffer overflows, allows remote attackers to execute arbitrary code via a crafted Windows Metafile (WMF) format image, aka "Windows Metafile Vulnerability.

Reporter	Title	Published	Views	Family All 10
Check Point Advisories	Microsoft Windows Graphics Engine EMF and WMF Rendering (CVE-2005-2123; CVE-2005-2124)	28 Jun 201000:00	–	checkpoint_advisories
Check Point Advisories	WMF and EMF Files (CVE-2005-2123; CVE-2005-2124; CVE-2005-4560; CVE-2006-0020)	22 Feb 200600:00	–	checkpoint_advisories
Check Point Advisories	GDI WMF File Rendering Code Execution - Ver2 (CVE-2005-2124)	31 Mar 201400:00	–	checkpoint_advisories
Cvelist	CVE-2005-2124	29 Nov 200521:00	–	cvelist
NVD	CVE-2005-2124	29 Nov 200521:03	–	nvd
securityvulns	US-CERT Technical Cyber Security Alert TA05-312A -- Microsoft Windows Image Processing Vulnerabilities	9 Nov 200500:00	–	securityvulns
securityvulns	[Full-disclosure] [EEYEB-20050329] Windows Metafile Multiple Heap Overflows	9 Nov 200500:00	–	securityvulns
securityvulns	Microsoft Security Bulletin MS05-053 Vulnerabilities in Graphics Rendering Engine Could Allow Code Execution (896424)	9 Nov 200500:00	–	securityvulns
Tenable Nessus	MS05-053: Vulnerabilities in Graphics Rendering Engine Could Allow Code Execution (896424)	8 Nov 200500:00	–	nessus
CERT	Microsoft Windows vulnerable to buffer overflow via specially crafted WMF file	8 Nov 200500:00	–	cert

NVD

Node

microsoft windows_2000sp4fr

microsoft windows_2003_serverMatch64-bit

microsoft windows_2003_serverMatchitanium

microsoft windows_2003_serverMatchr2

microsoft windows_2003_serverMatchsp1

microsoft windows_2003_serverMatchsp1itanium

microsoft windows_xp64-bit

microsoft windows_xpsp1tablet_pc

microsoft windows_xpsp2tablet_pc

Source	Link
eeye	www.eeye.com/html/research/advisories/AD20051108b.html
securityreason	www.securityreason.com/securityalert/161
securityfocus	www.securityfocus.com/bid/15356
us-cert	www.us-cert.gov/cas/techalerts/TA05-312A.html
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-053
secunia	www.secunia.com/advisories/17223
support	www.support.avaya.com/elmodocs2/security/ASA-2005-228.pdf
secunia	www.secunia.com/advisories/17461
secunia	www.secunia.com/advisories/17498
kb	www.kb.cert.org/vuls/id/433341

16 Apr 2026 00:27Current

7.5High risk

Vulners AI Score7.5

CVSS 27.6

EPSS0.83167