CVE-2005-2124

Related Files

Technical Cyber Security Alert 2005-312A

Posted Nov 9, 2005

Authored by US-CERT | Site us-cert.gov

Technical Cyber Security Alert TA05-312A - Microsoft has released updates that address critical vulnerabilities in Windows graphics rendering services. A remote, unauthenticated attacker exploiting these vulnerabilities could execute arbitrary code or cause a denial of service on an affected system.

tags | advisory, remote, denial of service, arbitrary, vulnerability

systems | windows

advisories | CVE-2005-2123, CVE-2005-2124, CVE-2005-0803

SHA-256 | e7447a542eaf53d621a44d2a16c5be621d1fde25bf9e9ac9ca0b932d7548fd5a

Download | Favorite | View

EEYEB-20050329.txt

Posted Nov 9, 2005

Authored by Fang Xing | Site eeye.com

eEye Security Advisory - eEye Digital Security has discovered a heap overflow vulnerability in the way the Windows Graphical Device Interface (GDI) processes Windows enhanced metafile images (file extensions EMF and WMF). An attacker could send a malicious metafile to a victim of his choice over any of a variety of media -- such as HTML e-mail, a link to a web page, a metafile-bearing Microsoft Office document, or a chat message -- in order to execute code on that user's system at the user's privilege level.

tags | advisory, web, overflow

systems | windows

advisories | CVE-2005-2124

SHA-256 | fbe0e7b4b08c26cdcbea6f41f6a2f4a4b4680d5b2050eb53b95436d4a2a12232

Download | Favorite | View