CVE-2005-0416: Buffer Overflow
First published: Mon Feb 14 2005(Updated: )
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Windows NT | =4.0-sp5 | |
| Microsoft Windows XP | =sp1 | |
| Microsoft Windows NT | =4.0-sp3 | |
| Microsoft Windows 2003 Server | =web | |
| Microsoft Windows 2003 Server | =enterprise | |
| Microsoft Windows XP | ||
| Microsoft Windows NT | =4.0-sp6a | |
| Microsoft Windows 2003 Server | =enterprise_64-bit | |
| Microsoft Windows XP | =gold | |
| Microsoft Windows 2000 | ||
| Microsoft Windows NT | =4.0-sp6 | |
| Microsoft Windows XP | ||
| Microsoft Windows NT | =4.0 | |
| Microsoft Windows NT | =4.0-sp1 | |
| Microsoft Windows NT | =4.0-sp3 | |
| Microsoft Windows 2000 | =sp4 | |
| Microsoft Windows XP | =sp1 | |
| Microsoft Windows XP | ||
| Microsoft Windows NT | =4.0-sp6 | |
| Microsoft Windows NT | =4.0-sp4 | |
| Microsoft Windows XP | =sp1 | |
| Microsoft Windows 98SE | ||
| Microsoft Windows NT | =4.0-sp5 | |
| Microsoft Windows 2000 | =sp2 | |
| Microsoft Windows NT | =4.0-sp6 | |
| Microsoft Windows NT | =4.0 | |
| Microsoft Windows NT | =4.0-sp4 | |
| Microsoft Windows NT | =4.0-sp2 | |
| Microsoft Windows 2003 Server | =r2 | |
| Microsoft Windows NT | =4.0-sp6a | |
| Microsoft Windows NT | =4.0 | |
| Microsoft Windows NT | =4.0-sp4 | |
| Microsoft Windows NT | =4.0-sp2 | |
| Microsoft Windows NT | =4.0-sp1 | |
| Microsoft Windows 2000 | =sp1 | |
| Microsoft Windows NT | =4.0-sp4 | |
| Microsoft Windows NT | =4.0-sp6 | |
| Microsoft Windows XP | ||
| Microsoft Windows NT | =4.0-sp3 | |
| Microsoft Windows NT | =4.0-sp1 | |
| Microsoft Windows Me | ||
| Microsoft Windows NT | =4.0-sp2 | |
| Microsoft Windows NT | =4.0-sp5 | |
| Microsoft Windows NT | =4.0-sp1 | |
| Microsoft Windows XP | =sp1 | |
| Microsoft Windows 2003 Server | =standard | |
| Microsoft Windows XP | =sp2 | |
| Microsoft Windows NT | =4.0 | |
| Microsoft Windows NT | =4.0-sp6a | |
| Microsoft Windows NT | =4.0-sp3 | |
| Microsoft Windows 98 | =gold | |
| Microsoft Windows 2003 Server | =r2 | |
| Microsoft Windows NT | =4.0-sp5 | |
| Microsoft Windows NT | =4.0-sp2 | |
| Microsoft Windows 2000 | =sp3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/12233
- http://eeye.com/html/research/advisories/AD20050111.html
- http://marc.info/?l=bugtraq&m=110547079218397&w=2
- http://marc.info/?l=bugtraq&m=110556975827760&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18879
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-002
Frequently Asked Questions
What is the severity of CVE-2005-0416?
CVE-2005-0416 is considered critical due to the potential for remote code execution.
How do I fix CVE-2005-0416?
To resolve CVE-2005-0416, ensure that you install the latest security updates and patches for your affected Microsoft Windows version.
Which Windows versions are affected by CVE-2005-0416?
CVE-2005-0416 affects Windows NT, Windows 2000, Windows XP, and Windows 2003 Server, specifically prior to their latest service packs.
What type of attack does CVE-2005-0416 facilitate?
CVE-2005-0416 allows attackers to execute arbitrary code through a specially crafted ANI file.
Is there a workaround for CVE-2005-0416 if I cannot apply the patch?
A temporary workaround for CVE-2005-0416 includes disabling the ability to process animated cursors.
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/remedy
- agent/severity
- agent/last-modified-date
- agent/author
- agent/tags
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- vendor/microsoft
- canonical/microsoft windows nt
- version/microsoft windows nt/4.0-sp5
- canonical/microsoft windows xp
- version/microsoft windows xp/sp1
- version/microsoft windows nt/4.0-sp3
- canonical/microsoft windows 2003 server
- version/microsoft windows 2003 server/web
- version/microsoft windows 2003 server/enterprise
- version/microsoft windows nt/4.0-sp6a
- version/microsoft windows 2003 server/enterprise_64-bit
- version/microsoft windows xp/gold
- canonical/microsoft windows 2000
- version/microsoft windows nt/4.0-sp6
- version/microsoft windows nt/4.0
- version/microsoft windows nt/4.0-sp1
- version/microsoft windows 2000/sp4
- version/microsoft windows nt/4.0-sp4
- canonical/microsoft windows 98se
- version/microsoft windows 2000/sp2
- version/microsoft windows nt/4.0-sp2
- version/microsoft windows 2003 server/r2
- version/microsoft windows 2000/sp1
- canonical/microsoft windows me
- version/microsoft windows 2003 server/standard
- version/microsoft windows xp/sp2
- canonical/microsoft windows 98
- version/microsoft windows 98/gold
- version/microsoft windows 2000/sp3