CVE-2005-0803

The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service (application crash) via a crafted Enhanced Metafile (EMF) file that causes invalid (1) end, (2) emreof, or (3) palent offsets to be used, aka "Enhanced Metafile Vulnerability."

Affected products

Gdi32.Dll, Windows 2000

Microsoft Windows 2000

All versions

Fix

Available

CVSS 2.0

5.0 MEDIUM

EPSS

67.7% (99th percentile)

Weakness

CWE-399

NVD status

Modified

Published

2005-03-20