Oval Definition:oval:org.mitre.oval:def:712
Revision Date:2008-03-24Version:47
Title:Animated Cursor Denial of Service (NT 4.0)
Description:The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2004-1305
Platform(s):Microsoft Windows NT
Product(s):Windows Animated Cursor
Definition Synopsis
  • Windows NT Server 4.0 is installed
  • Microsoft Windows NT is installed
  • AND Windows NT server product option
  • this is an NT Server (stand-alone)
  • OR this is an NT Server (domain controller)
  • AND the version of user32.dll is less than 4.0.1381.7342
  • AND NOT the patch kb891711 is installed
    • BACK