First published: Sun Apr 03 2005(Updated: )
Windows Explorer and Internet Explorer in Windows 2000 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a malformed Windows Metafile (WMF) file.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows Explorer | ||
Internet Explorer | =6.0.2900 | |
Microsoft Windows XP | =sp1 | |
Microsoft Windows XP | =gold | |
Microsoft Windows XP | ||
Microsoft Windows XP |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-0954 is classified as a denial of service vulnerability that can lead to high CPU consumption.
To mitigate CVE-2005-0954, it is recommended to apply any available security patches from Microsoft or consider upgrading to a supported version of Windows.
CVE-2005-0954 affects Windows Explorer and Internet Explorer running on Windows 2000 SP1 and various versions of Windows XP.
CVE-2005-0954 exploits a vulnerability in the handling of malformed Windows Metafile (WMF) files.
Yes, CVE-2005-0954 allows remote attackers to exploit the vulnerability via specially crafted WMF files.