Oval Definition:oval:org.mitre.oval:def:1431
Revision Date:2011-05-16Version:47
Title:Win2K Graphics Rendering Engine Vulnerability
Description:The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbitrary code via a Windows Metafile (WMF) format image with a crafted SETABORTPROC GDI Escape function call, related to the Windows Picture and Fax Viewer (SHIMGVW.DLL), a different vulnerability than CVE-2005-2123 and CVE-2005-2124, and as originally discovered in the wild on unionseek.com.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2005-4560
Platform(s):Microsoft Windows 2000
Product(s):
Definition Synopsis
  • Windows 2000 Service Pack 4 (or later) is installed
  • Windows 2000 is installed
  • AND Win2K/XP/2003 service pack 4 (or later) is installed
  • AND the version of Gdi32.dll is less than 5.0.2195.7073
  • BACK