CVE-2005-0803
- State
- Published
- Severity
- Not scored
- Published
- Mar 20, 2005
- Updated
- Aug 7, 2024
- Reserved
- Mar 20, 2005
Description
The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service (application crash) via a crafted Enhanced Metafile (EMF) file that causes invalid (1) end, (2) emreof, or (3) palent offsets to be used, aka "Enhanced Metafile Vulnerability."
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- oval:org.mitre.oval:def:1152vdb-entrysignature
- http://support.avaya.com/elmodocs2/security/ASA-2005-228.pdf
- 20580vdb-entry
- win-2000-gdi32dll-dos(19727)vdb-entry
- 17461third-party-advisory
- ADV-2005-2348vdb-entry
- VU#134756third-party-advisory
- 14631third-party-advisory
- 12834vdb-entry
- 1015168vdb-entry
- TA05-312Athird-party-advisory
- 17223third-party-advisory
- oval:org.mitre.oval:def:1240vdb-entrysignature
- 20050317 Windows 2000 GDI32.DLL GetEnhMetaFilePaletteEntries() API specially crafted EMF file DOS vulnerabilitymailing-list
- MS05-053vendor-advisory
- oval:org.mitre.oval:def:1121vdb-entrysignature
- oval:org.mitre.oval:def:1215vdb-entrysignature
- oval:org.mitre.oval:def:671vdb-entrysignature
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.