Overview
A vulnerability exists in the way the Microsoft Window's kernel processes animated cursor (.ani) files with a frame number set to zero. Exploitation of this vulnerability may allow a remote attacker to cause a denial-of-service condition.
Description
A vulnerability exists in the way the Microsoft Windows' kernel processes .ani files. These files contain animated graphics for icons and cursors. According to public reports, if the Windows kernel is supplied a .ani file with a frame number set to zero, it doesn't properly handle the .ani file. As a result, the kernel may crash or consume 100% of the system resources resulting in a denial-of-service condition. .ani files are parsed when the containing folder is opened or it is used as a cursor. In addition, Internet Explorer can process .ani files in HTML documents, so web pages and HTML email messages can also trigger this vulnerability. Other web browsers or programs that render HTML may also act as attack vectors. |
Impact
If a remote attacker can persuade a user to access a specially crafted ani file, the attacker may be able to crash that user's system. |
Solution
Apply Patch
|
Vendor Information
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | 0 | AV:--/AC:--/Au:--/C:--/I:--/A:-- |
| Temporal | 0 | E:ND/RL:ND/RC:ND |
| Environmental | 0 | CDP:ND/TD:M/CR:ND/IR:ND/AR:ND |
References
Acknowledgements
This vulnerability was reported to Microsoft by Sylvain Bruyere.
This document was written by Jeff Gennari.
Other Information
| CVE IDs: | CVE-2004-1305 |
| Severity Metric: | 28.35 |
| Date Public: | 2004-12-23 |
| Date First Published: | 2005-01-07 |
| Date Last Updated: | 2014-04-23 22:16 UTC |
| Document Revision: | 92 |