$ cve CVE-2005-2124 JSON

CVE-2005-2124 EXPLOIT

7.6

HIGH · CVSS 2.0 · EPSS 55.7% (pctl 99)

Patch early

A public exploit exists.

Description

Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1, related to "An unchecked buffer" and possibly buffer overflows, allows remote attackers to execute arbitrary code via a crafted Windows Metafile (WMF) format image, aka "Windows Metafile Vulnerability."

Scoring

CVSS	7.6 (HIGH, v2.0)
Vector	AV:N/AC:H/Au:N/C:C/I:C/A:C
EPSS	55.71% — more likely to be exploited than 99% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2005-11-29
Last modified	2026-06-16

Affected (3)

Vendor	Product
microsoft	windows 2000
microsoft	windows 2003 server
microsoft	windows xp

Public exploits

Source	Title	Date
exploit-db	Microsoft Windows Metafile - 'mtNoObjects' Denial of Service (MS05-053)	2005-11-30
exploit-db	Microsoft Windows Metafile - 'gdi32.dll' Denial of Service (MS05-053)	2005-11-29

References

→ the Explorer · watch your stack · NVD