CVE-2005-4560
- State
- Published
- Severity
- Not scored
- Published
- Dec 28, 2005
- Updated
- Aug 7, 2024
- Reserved
- Dec 28, 2005
Description
The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbitrary code via a Windows Metafile (WMF) format image with a crafted SETABORTPROC GDI Escape function call, related to the Windows Picture and Fax Viewer (SHIMGVW.DLL), a different vulnerability than CVE-2005-2123 and CVE-2005-2124, and as originally discovered in the wild on unionseek.com.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://vil.mcafeesecurity.com/vil/content/v_137760.htm
- 20051228 Re: Is this a new exploit?mailing-list
- http://www.f-secure.com/weblog/archives/archive-122005.html#00000753
- 20051228 WMF Exploitmailing-list
- oval:org.mitre.oval:def:1492vdb-entrysignature
- 20051228 RE: [Full-disclosure] Someone wasted a nice bug on spyware...mailing-list
- oval:org.mitre.oval:def:1564vdb-entrysignature
- 18255third-party-advisory
- oval:org.mitre.oval:def:1612vdb-entrysignature
- ADV-2005-3086vdb-entry
- 1015416vdb-entry
- 20051227 Exploitation of Windows WMF on the webmailing-list
- 20051229 WMF exploitmailing-list
- win-wmf-execute-code(23846)vdb-entry
- 18364third-party-advisory
- 20060104 Another WMF exploit workaroundmailing-list
- 18415third-party-advisory
- 20060101 Re: RE: WMF Exploitmailing-list
- 20060103 Re: [funsec] WMF round-up, updates and de-mystificationmailing-list
- 20060103 WMF round-up, updates and de-mystificationmailing-list
- 18311third-party-advisory
- TA05-362Athird-party-advisory
- http://linuxbox.org/pipermail/funsec/2006-January/002455.html
- 20051229 RE: WMF Exploitmailing-list
- oval:org.mitre.oval:def:1431vdb-entrysignature
- 20051227 Is this a new exploit?mailing-list
- VU#181038third-party-advisory
- oval:org.mitre.oval:def:1460vdb-entrysignature
- 16074vdb-entry
- http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375341
- MS06-001vendor-advisory
- 20060103 WMF SETABORTPROC exploitmailing-list
- oval:org.mitre.oval:def:1433vdb-entrysignature
- TA06-005Athird-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-001.htm
- http://www.microsoft.com/technet/security/advisory/912840.mspx
- http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375420
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.