CVE-2005-4560 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2005-4560
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2005-4560

Description: The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbitrary code via a Windows Metafile (WMF) format image with a crafted SETABORTPROC GDI Escape function call, related to the Windows Picture and Fax Viewer (SHIMGVW.DLL), a different vulnerability than CVE-2005-2123 and CVE-2005-2124, and as originally discovered in the wild on unionseek.com.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/23846 ST 1015416 SAID Secunia Advisory: SA18255 Secunia Advisory: SA18364 Secunia Advisory: SA18311 Secunia Advisory: SA18415 OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1612 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1564 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1492 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1460 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1431 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1433 MS http://www.microsoft.com/technet/security/bulletin/ms06-001.mspx MISC http://linuxbox.org/pipermail/funsec/2006-January/002455.html http://www.f-secure.com/weblog/archives/archive-122005.html#00000753 http://vil.mcafeesecurity.com/vil/content/v_137760.htm http://www.microsoft.com/technet/security/advisory/912840.mspx http://support.avaya.com/elmodocs2/security/ASA-2006-001.htm http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420 http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375341 CERT-VN 181038 CERT http://www.us-cert.gov/cas/techalerts/TA06-005A.html http://www.us-cert.gov/cas/techalerts/TA05-362A.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/420546/30/7730/threaded http://www.securityfocus.com/archive/1/archive/1/420664/30/7730/threaded http://www.securityfocus.com/archive/1/archive/1/420773/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/420687/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/420682/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/420684/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/420446/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/420378/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/420351/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/420357/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/420367/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/420288/100/0/threaded BID 16074

Return to the previous page.