CVE-2005-0803

The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service (application crash) via a crafted Enhanced Metafile (EMF) file that causes invalid (1) end, (2) emreof, or (3) palent offsets to be used, aka "Enhanced Metafile Vulnerability."

CVSS Metrics

Affected Products (5)

GitHub Security Advisory GHSA-5724-mx26-9j89

The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to...

References (36)

• http://marc.info/?l=bugtraq&m=111108743527497&w=2
• http://secunia.com/advisories/14631
• http://secunia.com/advisories/17223 Vendor Advisory
• http://secunia.com/advisories/17461 Vendor Advisory
• http://securitytracker.com/id?1015168
• http://support.avaya.com/elmodocs2/security/ASA-2005-228.pdf
• http://www.kb.cert.org/vuls/id/134756 US Government Resource
• http://www.osvdb.org/20580
• http://www.securityfocus.com/bid/12834 Exploit
• http://www.us-cert.gov/cas/techalerts/TA05-312A.html US Government Resource
• http://www.vupen.com/english/advisories/2005/2348 Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-053
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19727
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1121
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1152