Read the docs
TI-2004-01183 Aliases CVE-2004-1305GHSA-7cxg-jhh6-g9jr

The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4…

Priority MEDIUM 57Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.

Why it matters now

EPSS 0.58579 99th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 67

CPEVersionsRoleVendor
cpe:2.3:a:nortel:ip_softphone_2050:*:*:*:*:*:*:*:*all versionsVulnerableNortel
cpe:2.3:a:nortel:media_communication_server_5100:3.0:*:*:*:*:*:*:*3.0VulnerableNortel
cpe:2.3:a:nortel:media_communication_server_5200:3.0:*:*:*:*:*:*:*3.0VulnerableNortel
cpe:2.3:a:nortel:media_processing_server:*:*:*:*:*:*:*:*all versionsVulnerableNortel
cpe:2.3:a:nortel:periphonics:*:*:*:*:*:*:*:*all versionsVulnerableNortel
cpe:2.3:a:nortel:symposium_agent:*:*:*:*:*:*:*:*all versionsVulnerableNortel
cpe:2.3:a:nortel:symposium_network_control_center:*:*:*:*:*:*:*:*all versionsVulnerableNortel
cpe:2.3:a:nortel:symposium_tapi_service_provider:*:*:*:*:*:*:*:*all versionsVulnerableNortel
cpe:2.3:a:nortel:symposium_web_centre_portal:*:*:*:*:*:*:*:*all versionsVulnerableNortel
cpe:2.3:a:nortel:symposium_web_client:*:*:*:*:*:*:*:*all versionsVulnerableNortel
  • cpe:2.3:a:nortel:ip_softphone_2050:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Nortel
  • cpe:2.3:a:nortel:media_communication_server_5100:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Nortel
  • cpe:2.3:a:nortel:media_communication_server_5200:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Nortel
  • cpe:2.3:a:nortel:media_processing_server:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Nortel
  • cpe:2.3:a:nortel:periphonics:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Nortel
  • cpe:2.3:a:nortel:symposium_agent:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Nortel
  • cpe:2.3:a:nortel:symposium_network_control_center:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Nortel
  • cpe:2.3:a:nortel:symposium_tapi_service_provider:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Nortel
  • cpe:2.3:a:nortel:symposium_web_centre_portal:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Nortel
  • cpe:2.3:a:nortel:symposium_web_client:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Nortel
Show 57 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:nortel:symposium_call_center_server:*:*:*:*:*:*:*:*all versionsVulnerableNortel
cpe:2.3:h:nortel:symposium_express_call_center:*:*:*:*:*:*:*:*all versionsVulnerableNortel
cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*enterpriseVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*enterprise_64-bitVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*r2VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*r2VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*standardVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*webVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*4.0VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*4.0VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*4.0VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*4.0VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*4.0 sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*4.0 sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*4.0 sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*4.0 sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*4.0 sp2VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*4.0 sp2VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*4.0 sp2VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*4.0 sp2VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*4.0 sp3VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*4.0 sp3VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*4.0 sp3VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*4.0 sp3VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*4.0 sp4VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*4.0 sp4VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*4.0 sp4VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*4.0 sp4VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*4.0 sp5VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*4.0 sp5VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*4.0 sp5VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*4.0 sp5VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*4.0 sp6VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*4.0 sp6VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*4.0 sp6VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*4.0 sp6VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*4.0 sp6aVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*4.0 sp6aVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*4.0 sp6aVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*all versionsVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*all versionsVulnerableMicrosoft
  • cpe:2.3:h:nortel:symposium_call_center_server:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Nortel
  • cpe:2.3:h:nortel:symposium_express_call_center:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Nortel
  • cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:* Versions enterprise Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:* Versions enterprise_64-bit Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:* Versions r2 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:* Versions r2 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:* Versions standard Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:* Versions web Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:* Versions 4.0 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:* Versions 4.0 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:* Versions 4.0 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:* Versions 4.0 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:* Versions 4.0 sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:* Versions 4.0 sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:* Versions 4.0 sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:* Versions 4.0 sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:* Versions 4.0 sp2 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:* Versions 4.0 sp2 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:* Versions 4.0 sp2 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:* Versions 4.0 sp2 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:* Versions 4.0 sp3 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:* Versions 4.0 sp3 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:* Versions 4.0 sp3 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:* Versions 4.0 sp3 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:* Versions 4.0 sp4 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:* Versions 4.0 sp4 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:* Versions 4.0 sp4 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:* Versions 4.0 sp4 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:* Versions 4.0 sp5 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:* Versions 4.0 sp5 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:* Versions 4.0 sp5 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:* Versions 4.0 sp5 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:* Versions 4.0 sp6 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:* Versions 4.0 sp6 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:* Versions 4.0 sp6 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:* Versions 4.0 sp6 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:* Versions 4.0 sp6a Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:* Versions 4.0 sp6a Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:* Versions 4.0 sp6a Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:* Versions all versions Vulnerable ·Microsoft

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2004-1305
  2. 2026-10-03 Alias added: GHSA-7cxg-jhh6-g9jr

References

Patch 3

Advisory 2

Other 6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences