CVE-2005-4560

The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbitrary code via a Windows Metafile (WMF) format image with a crafted SETABORTPROC GDI Escape function call, related to the Windows Picture and Fax Viewer (SHIMGVW.DLL), a different vulnerability than CVE-2005-2123 and CVE-2005-2124, and as originally discovered in the wild on unionseek.com.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

86.09% chance of exploitation in the next 30 days, 100th percentile

Published

2005-12-28

Updated

2024-08-07

Proof-of-concept exploits (9)

• http://www.securityfocus.com/archive/1/420367/100/0/threaded
• http://www.securityfocus.com/archive/1/420378/100/0/threaded
• http://www.securityfocus.com/archive/1/420351/100/0/threaded
• http://www.securityfocus.com/archive/1/420446/100/0/threaded
• http://www.securityfocus.com/archive/1/420773/100/0/threaded
• http://www.securityfocus.com/archive/1/420664/30/7730/threaded
• http://www.securityfocus.com/archive/1/420546/30/7730/threaded
• http://www.securityfocus.com/archive/1/420288/100/0/threaded
• http://www.securityfocus.com/archive/1/420684/100/0/threaded

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms06_001_wmf_set…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/16612

References

• CVE Record
• NVD entry

Related

• CVE-2005-4559
• CVE-2005-4563
• CVE-2005-4558
• CVE-2005-4573
• CVE-2005-4557
• CVE-2005-4574