CVE-2004-1305
Medium
Description
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.
SeverityMedium
CVSS5.0
Exploit probability—
Product
Microsoft Windows
PublishedDec 23, 2004
First seenDec 23, 2004
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microsoft windows_2000 | No range specified | — |
| nortel ip_softphone_2050 | No range specified | — |
| nortel media_communication_server_5100 | 3.0 | — |
| nortel media_communication_server_5200 | 3.0 | — |
| nortel media_processing_server | No range specified | — |
| nortel periphonics | No range specified | — |
| nortel symposium_agent | No range specified | — |
| nortel symposium_network_control_center | No range specified | — |
| nortel symposium_tapi_service_provider | No range specified | — |
| nortel symposium_web_centre_portal | No range specified | — |
| nortel symposium_web_client | No range specified | — |
| nortel symposium_call_center_server | No range specified | — |
| nortel symposium_express_call_center | No range specified | — |
| microsoft windows_2003_server | enterprise, enterprise_64-bit, r2, standard, web | — |
| microsoft windows_98 | No range specified | — |
| microsoft windows_98se | No range specified | — |
| microsoft windows_me | No range specified | — |
| microsoft windows_nt | 4.0 | — |
| microsoft windows_xp | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.