CVE-2005-0416

The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

40.98% chance of exploitation in the next 30 days, 99th percentile

Published

2005-02-14

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://marc.info/?l=bugtraq&m=110556975827760&w=2

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/771
• https://www.exploit-db.com/exploits/765

References

• CVE Record
• NVD entry

Related

• CVE-2005-0414
• CVE-2005-0419
• CVE-2005-0413
• CVE-2005-0420
• CVE-2005-0411
• CVE-2005-0421