CVE-2004-1305: Medium severity Nortel IP Softphone 2050 vulnerability
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1305?
CVE-2004-1305 has a severity rating of critical due to its potential to cause a denial of service and kernel crash.
How do I fix CVE-2004-1305?
To fix CVE-2004-1305, users should upgrade to a secure version of Windows that is no longer vulnerable to this flaw.
What systems are affected by CVE-2004-1305?
CVE-2004-1305 affects multiple Windows operating systems including Windows NT, Windows 2000, Windows XP, and Windows 2003.
What type of vulnerability is CVE-2004-1305?
CVE-2004-1305 is a denial of service vulnerability related to the Windows Animated Cursor (ANI) capability.
Can CVE-2004-1305 be exploited remotely?
Yes, CVE-2004-1305 can be exploited remotely by attackers sending specially crafted animated cursor files.