The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.
📦
symposium_web_centre_portal
Vendor: nortel
Actively Exploited
0
CISA KEV List
PoC / Exploits
1
Code Available
Total RCEs
1
Remote Access
Total CVEs
2
Total Indexed
Avg. EPSS
62.19%
Exploit Prob.
Security Vulnerability Index
Page 1 / 1
5.0
CVSS
CVE-2004-1305
Exploit Found
Severity: MEDIUM
5.0
CVSS
CVE-2004-0839
RCE
Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".
Severity: MEDIUM