CVE-2005-4560

Related Files

Windows XP/2003/Vista Metafile Escape() SetAbortProc Code Execution

Posted Nov 26, 2009

Authored by H D Moore, san, O600KO78RUS | Site metasploit.com

This Metasploit module exploits a vulnerability in the GDI library included with Windows XP and 2003. This vulnerability uses the 'Escape' metafile function to execute arbitrary code through the SetAbortProc procedure. This Metasploit module generates a random WMF record stream for each request.

tags | exploit, arbitrary

systems | windows

advisories | CVE-2005-4560

SHA-256 | 86db9cc6a7d38fd5ac3353ce911cfa4cb32c5b51f03725a5e001c941eb2b3e42

Download | Favorite | View

Technical Cyber Security Alert 2005-362A

Posted Dec 31, 2005

Authored by US-CERT | Site us-cert.gov

Technical Cyber Security Alert TA05-362A - Microsoft Windows is vulnerable to remote code execution via an error in handling files using the Windows Metafile image format. Exploit code has been publicly posted and used to successfully attack fully-patched Windows XP SP2 systems. However, other versions of the the Windows operating system may be at risk as well.

tags | advisory, remote, code execution

systems | windows

advisories | CVE-2005-4560

SHA-256 | f6f83f4c62f88b1b8f28ccf5bd55c11ca01db6be417a1c42f07ba65cd3f93cf3

Download | Favorite | View