The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2004-12-23 05:00
Updated : 2019-04-30 14:27
NVD link : CVE-2004-1305
Mitre link : CVE-2004-1305
CVE.ORG link : CVE-2004-1305
JSON object : View
Products Affected
microsoft
- windows_nt
- windows_me
- windows_2003_server
- windows_xp
- windows_98se
- windows_2000
- windows_98
nortel
- symposium_express_call_center
- symposium_network_control_center
- symposium_agent
- symposium_web_centre_portal
- symposium_call_center_server
- symposium_web_client
- periphonics
- ip_softphone_2050
- symposium_tapi_service_provider
- media_processing_server
- media_communication_server_5100
- media_communication_server_5200
CWE