CVE-2005-1219 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 49.9% (pctl 99)
Patch early
A public exploit exists.
Description
Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 49.92% — more likely to be exploited than 99% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2005-07-12 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| microsoft | image color management |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Microsoft Windows - Color Management Module Overflow (MS05-036) (2) | 2006-02-17 |
| exploit-db | Microsoft Windows - Color Management Module Overflow (MS05-036) (1) | 2005-07-21 |
References
- http://secunia.com/advisories/16004/
- http://www.kb.cert.org/vuls/id/720742
- http://www.securityfocus.com/bid/14214
- http://www.us-cert.gov/cas/techalerts/TA05-193A.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-036
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1125
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1280
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A330
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A440
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A769
- http://secunia.com/advisories/16004/
- http://www.kb.cert.org/vuls/id/720742
- http://www.securityfocus.com/bid/14214
- http://www.us-cert.gov/cas/techalerts/TA05-193A.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-036
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1125
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1280
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A330
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A440
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A769
→ the Explorer · watch your stack · NVD