NVD

Id
67831  
Name
CVE-2005-2123  
Description
Multiple integer overflows in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allow remote attackers to execute arbitrary code via crafted Windows Metafile (WMF) and Enhanced Metafile (EMF) format images that lead to heap-based buffer overflows, as demonstrated using MRBP16::bCheckRecord.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-11-29  
Modified Date
2011-03-07  
Seq
2005-2123  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
351006 67831 CVE-2005-2123 oval:org.mitre.oval:def:1063  View
351007 67831 CVE-2005-2123 oval:org.mitre.oval:def:1175  View
351008 67831 CVE-2005-2123 oval:org.mitre.oval:def:1263  View
351009 67831 CVE-2005-2123 oval:org.mitre.oval:def:1546  View
351010 67831 CVE-2005-2123 oval:org.mitre.oval:def:701  View
351011 67831 CVE-2005-2123 1015168  View
351012 67831 CVE-2005-2123 http://support.avaya.com/elmodocs2/security/ASA-2005-228.pdf  View
351013 67831 CVE-2005-2123 http://www.eeye.com/html/research/advisories/AD20051108b.html  View
351014 67831 CVE-2005-2123 VU#300549  View
351015 67831 CVE-2005-2123 MS05-053  View
351016 67831 CVE-2005-2123 15352  View
351017 67831 CVE-2005-2123 TA05-312A  View
351018 67831 CVE-2005-2123 ADV-2005-2348  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62465 JVNDB-2005-000667 Microsoft Windows の不正な WMF/EMF ファイルのレンダリング処理による複数のヒープオーバーフローの脆弱性 Microsoft Windows の Graphics Rendering Engine (GDI32.DLL) には、特定の Windows メタファイル (WMF) および拡張メタファイル (EMF) をレンダリング処理する際に複数のヒープオーバーフローが発生する脆弱性が存在します。 CVE-2005-2123 13327 CVE-2005-2123 67831 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000667.html 2005-11-08 2007-04-01 View