Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2005-4560
HistoryDec 28, 2005 - 7:03 p.m.

CVE-2005-4560

2005-12-2819:03:00
CWE-20
[email protected]
web.nvd.nist.gov
28
windows
gdi32.dll
cve-2005-4560
remote code execution
wmf
shimgvw.dll
nvd

7.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.974 High

EPSS

Percentile

99.9%

JSON

The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbitrary code via a Windows Metafile (WMF) format image with a crafted SETABORTPROC GDI Escape function call, related to the Windows Picture and Fax Viewer (SHIMGVW.DLL), a different vulnerability than CVE-2005-2123 and CVE-2005-2124, and as originally discovered in the wild on unionseek.com.

References

Related

ubuntucve 2
checkpoint_advisories 4
securityvulns 7
saint 4
cert 3
packetstorm 1
canvas 1
nessus 2
cve 5
prion 3
debiancve 1
ubuntucve
ubuntucve
CVE-2005-4560
2005-12-28 00:00:00
CVE-2006-0106
2006-01-06 00:00:00
checkpoint_advisories
checkpoint_advisories
WMF and EMF Files (CVE-2005-2123; CVE-2005-2124; CVE-2005-4560; CVE-2006-0020)
2006-02-22 00:00:00
Microsoft Windows WMF Handling Arbitrary Code Execution (CVE-2005-4560)
2010-03-22 00:00:00
Microsoft Windows Graphics Engine EMF and WMF Rendering (CVE-2005-2123; CVE-2005-2124)
2010-06-28 00:00:00
securityvulns
securityvulns
US-CERT Technical Cyber Security Alert TA05-362A -- Microsoft Windows Metafile Handling Buffer Overflow
2005-12-29 00:00:00
Microsoft Security Bulletin MS06-001 Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution (912919)
2006-01-07 00:00:00
Lotus Notes WMF File Handling Code Execution Vulnerability
2005-12-30 00:00:00
saint
saint
Windows WMF handling vulnerability
2005-12-30 00:00:00
Windows WMF handling vulnerability
2005-12-30 00:00:00
Windows WMF handling vulnerability
2005-12-30 00:00:00
cert
cert
Microsoft Windows Metafile handler SETABORTPROC GDI Escape vulnerability
2005-12-28 00:00:00
Microsoft Windows Graphics Rendering Engine buffer overflow vulnerability
2005-11-08 00:00:00
Microsoft Windows vulnerable to buffer overflow via specially crafted WMF file
2005-11-08 00:00:00
packetstorm
packetstorm
Windows XP/2003/Vista Metafile Escape() SetAbortProc Code Execution
2009-11-26 00:00:00
canvas
canvas
Immunity Canvas: WMF_SETABORT
2005-12-28 19:03:00
nessus
nessus
MS06-001: Vulnerabilities in Graphics Rendering Engine Could Allow Code Execution (912919)
2006-01-05 00:00:00
MS05-053: Vulnerabilities in Graphics Rendering Engine Could Allow Code Execution (896424)
2005-11-08 00:00:00
cve
cve
CVE-2007-1211
2007-04-04 16:19:00
CVE-2006-0106
2006-01-06 18:03:00
CVE-2006-0020
2006-01-10 21:03:00
prion
prion
Sql injection
2007-04-04 16:19:00
Integer overflow
2006-01-10 21:03:00
Code injection
2006-01-06 18:03:00
debiancve
debiancve
CVE-2006-0106
2006-01-06 18:03:00

7.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.974 High

EPSS

Percentile

99.9%

JSON
Related for CVE-2005-4560
ubuntucve2checkpoint_advisories4securityvulns7saint4cert3packetstorm1canvas1nessus2cve5prion3debiancve1