CVE-2005-4560

The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote...

7.5 HighPublic exploit

The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbitrary code via a Windows Metafile (WMF) format image with a crafted SETABORTPROC GDI Escape function call, related to the Windows Picture and Fax Viewer (SHIMGVW.DLL), a different vulnerability than CVE-2005-2123 and CVE-2005-2124, and as originally discovered in the wild on unionseek.com.

Exploit likelihood

86.1%Down 1.4 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2005-4560
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

Record: CVE-2005-4560
Updated: 2026-11-02

EUVDEUVD-2005-4555 No score

Record: EUVD-2005-4555
Updated: 2026-11-03

GitHub AdvisoriesGHSA-w94w-cg39-6r6h No score

The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote...

Record: GHSA-w94w-cg39-6r6h
Weakness: CWE-20
Updated: 2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Microsoft Windows XP/Vista/2003 - Metafile Escape() SetAbortProc Code Execution (MS06-001) (Metasploit)	2010-09-20
Metasploit	Windows XP/2003/Vista Metafile Escape() SetAbortProc Code Execution	2005-12-27

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-4560 is a high vulnerability (CVSS 7.5) in Microsoft Windows 2003 Server, published December 28, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 86.1%, the 99th percentile. No source names a fixed version.

References

Show 33 moreShow less