Oval Definition:oval:org.mitre.oval:def:1304
Revision Date:2011-05-16Version:47
Title:Animated Cursor Denial of Service (XP)
Description:The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2004-1305
Platform(s):Microsoft Windows XP
Product(s):Windows Animated Cursor
Definition Synopsis
  • Windows XP SP1 OR Windows XP 64-bit SP1 is installed
  • Windows XP 32-bit SP1 is installed
  • Windows XP 32-bit edition is installed
  • Windows XP is installed
  • AND 32-Bit version of Windows is installed
  • AND Win2K/XP/2003/Vista service pack 1 is installed
  • OR Windows XP 64-bit with Service Pack 1
  • Windows XP is installed
  • AND a version of Windows for the ia64 architecture is installed
  • AND Win2K/XP/2003/Vista service pack 1 is installed
  • AND the version of user32.dll is less than 5.1.2600.1617
  • AND NOT the patch kb891711 is installed
    • BACK