CVE-2005-0803

MEDIUM 5.0CVE-2005-0803 · Published 02/05/2005 · updated 16/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service (application crash) via a crafted Enhanced Metafile (EMF) file that causes invalid (1) end, (2) emreof, or (3) palent offsets to be used, aka "Enhanced Metafile Vulnerability."

References

marc.info
secunia.com/advisories/14631
secunia.com/advisories/17223 · Vendor Advisory
secunia.com/advisories/17461 · Vendor Advisory
securitytracker.com/id
support.avaya.com/elmodocs2/security/ASA-2005-228.pdf
kb.cert.org/vuls/id/134756 · US Government Resource
osvdb.org/20580
securityfocus.com/bid/12834 · Exploit
us-cert.gov/cas/techalerts/TA05-312A.html · US Government Resource
vupen.com/english/advisories/2005/2348 · Vendor Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-053
exchange.xforce.ibmcloud.com/vulnerabilities/19727
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1121
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1152
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1215
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1240
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A671

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free