Every CVE Search/ Get API key

CVE-2005-1793

User32.DLL in Microsoft Windows 98SE, and possibly other operating systems, allows local and...

2.6 Low

User32.DLL in Microsoft Windows 98SE, and possibly other operating systems, allows local and remote attackers to cause a denial of service (crash) via an icon (.ico) bitmap file with large width and height values.

Exploit likelihood

7.41%Down 2.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.6

User32.DLL in Microsoft Windows 98SE, and possibly other operating systems, allows local and remote attackers to cause a denial of service (crash) via an icon (.ico) bitmap file with large width and height values.

Record
CVE-2005-1793
CVSS 2.0
2.6 LowAV:N/AC:H/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

User32.DLL in Microsoft Windows 98SE, and possibly other operating systems, allows local and remote attackers to cause a denial of service (crash) via an icon (.ico) bitmap file with large width and height values.

Record
CVE-2005-1793
Updated
2026-11-02
EUVDEUVD-2005-1795 No score

User32.DLL in Microsoft Windows 98SE, and possibly other operating systems, allows local and remote attackers to cause a denial of service (crash) via an icon (.ico) bitmap file with large width and height values.

Record
EUVD-2005-1795
Updated
2026-11-03
GitHub AdvisoriesGHSA-j2vg-p66m-8xmh No score

User32.DLL in Microsoft Windows 98SE, and possibly other operating systems, allows local and...

User32.DLL in Microsoft Windows 98SE, and possibly other operating systems, allows local and remote attackers to cause a denial of service (crash) via an icon (.ico) bitmap file with large width and height values.

Record
GHSA-j2vg-p66m-8xmh
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-1793 is a low vulnerability (CVSS 2.6) in Microsoft Windows 98se, published June 1, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.41%, the 94th percentile. No source names a fixed version.

References

MoveEnter Open