CVE-2004-1305
No fix known EPSS 59%
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.
Products: nortel ip_softphone_2050, nortel media_communication_server_5100, nortel media_communication_server_5200, nortel media_processing_server, nortel periphonics, nortel symposium_agent, nortel symposium_network_control_center, nortel symposium_tapi_service_provider, nortel symposium_web_centre_portal, nortel symposium_web_client, microsoft windows_2000, microsoft windows_2003_server, microsoft windows_98, microsoft windows_98se, microsoft windows_me, microsoft windows_nt, microsoft windows_xp