CVE-2005-0416

35Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 41%

from disclosure to weapon0 days

Published on NVDFeb 14

1st PoCJan 22

exploitation probability

41%top 1% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow.

Affected products

n/a · n/a

public PoCs found — 2✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/765 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/771

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://eeye.com/html/research/advisories/AD20050111.html http://marc.info/?l=bugtraq&m=110547079218397&w=2 http://marc.info/?l=bugtraq&m=110556975827760&w=2 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-002 https://exchange.xforce.ibmcloud.com/vulnerabilities/18879 http://www.securityfocus.com/bid/12233