VDB

CVE-2004-1305

CVE-2004-1305 PUBLISHED CVSS 5 MEDIUM

The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.

EPSS 78.47% · 99.1th percentile

Risk Scores

CVSS 2.0
5
EPSS Score
78.47%
99.1th percentile

Affected Products

VendorProductVersions
nortelip_softphone_2050
microsoftwindows_2003_serverenterprise, r2, enterprise_64-bit
microsoftwindows_2000
nortelsymposium_agent
microsoftwindows_nt4.0, 4.0, 4.0
nortelperiphonics
nortelmedia_communication_server_52003.0
nortelmedia_processing_server
nortelsymposium_call_center_server
nortelmedia_communication_server_51003.0
nortelsymposium_tapi_service_provider
microsoftwindows_me
nortelsymposium_web_centre_portal
microsoftwindows_xp
microsoftwindows_98
microsoftwindows_98se
nortelsymposium_network_control_center
n/an/an/a
nortelsymposium_web_client
nortelsymposium_express_call_center

Timeline

  • Dec 23, 2004 CVE Published
  • Feb 4, 2022 EPSS Score
  • May 20, 2022 EPSS Score
  • Jul 12, 2022 EPSS Score
  • Oct 26, 2022 EPSS Score
  • Dec 18, 2022 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 3, 2023 EPSS Score
  • Jul 17, 2023 EPSS Score
  • Sep 8, 2023 EPSS Score
  • Dec 14, 2023 EPSS Score
  • Feb 13, 2024 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›