CVE-2005-0416
Windows NT/2000/XP/2003 - Remote Code Execution via Animated Cursor Length Field
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-0416. PoCs published by Vertygo, houseofdabus.
AI-analyzed exploit summary This exploit targets CVE-2005-0416, a vulnerability in Microsoft Internet Explorer's handling of .ANI files. It crafts a malicious .ANI file and an HTML file to trigger remote code execution via a port-binding shellcode.
Description
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow.
Exploits (2)
This exploit targets CVE-2005-0416, a vulnerability in Microsoft Internet Explorer's handling of .ANI files. It crafts a malicious .ANI file and an HTML file to trigger remote code execution via a port-binding shellcode.
This exploit generates a malicious .ANI file and an HTML file to trigger a remote code execution vulnerability in Microsoft Internet Explorer (CVE-2005-0416). It uses a port-binding shellcode to establish a reverse shell on the specified port.