CVE-2004-1305
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP...
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.
Exploit likelihood
What each source reports
NVD Score used
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.
- Record
CVE-2004-1305- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.
- Record
CVE-2004-1305- Updated
- 2026-11-02
EUVDEUVD-2004-1302 No score
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.
- Record
EUVD-2004-1302- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7cxg-jhh6-g9jr No score
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP...
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.
- Record
GHSA-7cxg-jhh6-g9jr- Updated
- 2026-11-02
Affected products
- microsoft windows 2000
- microsoft windows nt
- microsoft windows xp
- microsoft windows 2003 server
- microsoft windows 98
- microsoft windows 98se
- microsoft windows me
- nortel ip softphone 2050
- nortel media communication server 5100
- nortel media communication server 5200
- nortel media processing server
- nortel periphonics
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Windows Kernel - '.ANI' File Parsing Crash | 2004-12-25 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-1305 is a medium vulnerability (CVSS 5.0) in Microsoft Windows 2000, published December 23, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 58.6%, the 99th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A712
kb.cert.org/vuls/id/697136
docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-002
xfocus.net/flashsky/icoExp
Show 8 moreShow less
marc.info?l=bugtraq&m=110382854111833&w=2
exchange.xforce.ibmcloud.com/vulnerabilities/18667
us-cert.gov/cas/techalerts/TA05-012A.html
nvd.nist.gov/vuln/detail/CVE-2004-1305
github.com/advisories/GHSA-7cxg-jhh6-g9jr