CVE-2005-0954: Medium severity Microsoft Internet Explorer vulnerability

Published Apr 3, 2005

Updated

Windows Explorer and Internet Explorer in Windows 2000 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a malformed Windows Metafile (WMF) file.

Affected Software

6 affected components

Microsoft Internet Explorer=6.0.2900

Microsoft Windows Explorer

Microsoft Windows XP

Microsoft Windows XP=gold

Microsoft Windows XP=sp1

Event History

Apr 3, 2005

CVE Published

via MITRE·09:00 AM

Data Sourced

via MITRE·09:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-0954?

CVE-2005-0954 is classified as a denial of service vulnerability that can lead to high CPU consumption.

How do I fix CVE-2005-0954?

To mitigate CVE-2005-0954, it is recommended to apply any available security patches from Microsoft or consider upgrading to a supported version of Windows.

Which software is affected by CVE-2005-0954?

CVE-2005-0954 affects Windows Explorer and Internet Explorer running on Windows 2000 SP1 and various versions of Windows XP.

What does CVE-2005-0954 exploit?

CVE-2005-0954 exploits a vulnerability in the handling of malformed Windows Metafile (WMF) files.

Can CVE-2005-0954 be exploited remotely?

Yes, CVE-2005-0954 allows remote attackers to exploit the vulnerability via specially crafted WMF files.