CVE-2005-1219

Опубликовано: 12 июл. 2005

Источник: nvd

CVSS2: 7.5

EPSS Высокий

Описание

Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags.

Ссылки

http://secunia.com/advisories/16004/
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/720742
US Government Resource
http://www.securityfocus.com/bid/14214
http://www.us-cert.gov/cas/techalerts/TA05-193A.html
US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-036
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1125
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1280
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A330
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A440
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A769
http://secunia.com/advisories/16004/
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/720742
US Government Resource
http://www.securityfocus.com/bid/14214
http://www.us-cert.gov/cas/techalerts/TA05-193A.html
US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-036
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1125
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1280
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A330
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A440
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A769

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:microsoft:image_color_management:*:gold:windows:*:*:*:*:*

EPSS

Процентиль: 99%

0.77988

Высокий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-cr6g-748f-gvr6

github

почти 4 года назад