CVE-2005-0416

The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow.

Affected products

Windows 2000, Windows 2003, Windows Nt, Windows Xp

Microsoft Windows 2000

All versions

Microsoft Windows 2003 Server

= enterprise, enterprise_64-bit, R2, standard, web

Microsoft Windows 98

All versions

Microsoft Windows 98se

All versions

Microsoft Windows Me

All versions

Microsoft Windows Nt

= 4.0

Fix

Available

CVSS 2.0

7.5 HIGH

EPSS

41.0% (99th percentile)

NVD status

Modified

Published

2005-02-14