Microsoft Windows .ANI (animated cursor) files buffer overflow
Published:		13.01.2005
Source:		MICROSOFT
SecurityVulns ID:		4351
Type:		client
Level:		8/10
Description:		USER32.DLL buffer overflow allows code to be executed. This vulnerability can potentially be used for silent spyware/adware installation.

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows ME
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server

Original document		CERT, US-CERT Technical Cyber Security Alert TA05-012A -- Multiple Vulnerabilities in Microsoft Windows Icon and Cursor Processing (13.01.2005)
		MICROSOFT, Microsoft Security Bulletin MS05-002 Vulnerability in Cursor and Icon Format Handling Could Allow Remote Code Execution (891711) (13.01.2005)
		EEYE, EEYE: Windows ANI File Parsing Buffer Overflow (13.01.2005)

Files:		(MS05-002) Microsoft Internet Explorer .ANI Files Handling Exploit (CAN-2004-1049)
		MS05-002 xploit modification - connectback addition
		Microsoft Security Bulletin MS05-002 Vulnerability in Cursor and Icon Format Handling Could Allow Remote Code Execution (891711)
Discuss:		Read or add your comments to this news (0 comments)