CVE-2005-0803 in Windows

Summary

The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service (application crash) via a crafted Enhanced Metafile (EMF) file that causes invalid (1) end, (2) emreof, or (3) palent offsets to be used, aka "Enhanced Metafile Vulnerability."

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

03/20/2005

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
83151	Microsoft Windows EMF File GetEnhMetaFilePaletteEntries denial of service	404	Proof-of-Concept	Official fix	CVE-2005-0803
1291	Microsoft Windows EMF File GetEnhMetaFilePaletteEntries resource management	399	Proof-of-Concept	Official fix	CVE-2005-0803

Sources

• MITRE
• NVD
• CVE Details