CVE-2005-2123

Related Files

Technical Cyber Security Alert 2005-312A

Posted Nov 9, 2005

Authored by US-CERT | Site us-cert.gov

Technical Cyber Security Alert TA05-312A - Microsoft has released updates that address critical vulnerabilities in Windows graphics rendering services. A remote, unauthenticated attacker exploiting these vulnerabilities could execute arbitrary code or cause a denial of service on an affected system.

tags | advisory, remote, denial of service, arbitrary, vulnerability

systems | windows

advisories | CVE-2005-2123, CVE-2005-2124, CVE-2005-0803

SHA-256 | e7447a542eaf53d621a44d2a16c5be621d1fde25bf9e9ac9ca0b932d7548fd5a

Download | Favorite | View

EEYEB-20050901.txt

Posted Nov 9, 2005

Authored by Fang Xing | Site eeye.com

eEye Security Advisory - eEye Digital Security has discovered a vulnerability in the way the Windows Graphical Device Interface (GDI) processes Windows Metafile (WMF) format image files that would allow arbitrary code execution as a user who attempts to view a malicious image. An attacker could send such a metafile to a victim of his choice over any of a variety of attack vectors, including an HTML e-mail, a link to a web page, a metafile-bearing Microsoft Office document, or a chat message.

tags | advisory, web, arbitrary, code execution

systems | windows

advisories | CVE-2005-2123

SHA-256 | fb070c689f7c1eb6298f3b908b6d3263adc6334948806fad6400732d941dbe93

Download | Favorite | View