Exploitation Summary
CVE-2005-1219 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 2 public exploits from researchers including darkeagle, snooq.
AI-analyzed exploit summary This exploit targets a stack overflow vulnerability in Microsoft's ICC profile parsing (CVE-2005-1219) via a malformed JPEG file. It uses a crafted ICC profile to trigger a buffer overflow, allowing arbitrary code execution.
Description
Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags.
Exploits (2)
This exploit targets a stack overflow vulnerability in Microsoft's ICC profile parsing (CVE-2005-1219) via a malformed JPEG file. It uses a crafted ICC profile to trigger a buffer overflow, allowing arbitrary code execution.
This exploit targets a stack-based buffer overflow in the `GetColorProfileElement` function of the Microsoft Color Management Module (ICM32.dll) via a malformed ICC profile in a JPEG file. It manipulates the `redMatrixColumnTag` size field to overwrite stack content, including the saved EIP, to achieve arbitrary code execution.