The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2004-12-22 21:00
Updated : 2019-04-30 07:27
NVD link : CVE-2004-1305
Mitre link : CVE-2004-1305
JSON object : View
CWE
Products Affected
microsoft
- windows_2003_server
- windows_98se
- windows_nt
- windows_98
- windows_xp
- windows_me
- windows_2000
nortel
- periphonics
- media_processing_server
- symposium_express_call_center
- symposium_web_centre_portal
- symposium_agent
- symposium_network_control_center
- symposium_web_client
- symposium_call_center_server
- ip_softphone_2050
- symposium_tapi_service_provider
- media_communication_server_5200
- media_communication_server_5100