CVE-2005-1219

CVE-2005-1219 describes a buffer overflow vulnerability in the Microsoft Color Management Module, affecting Microsoft Windows. This flaw allows remote attackers to execute arbitrary code by crafting an image with malicious ICC profile format tags. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector, low attack complexity, and potential for full compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog or showing active exploitation, public exploit code exists on ExploitDB, indicating its potential for use. Despite its age, the high FAUCET Risk Score of 99/100 suggests continued relevance for systems without the necessary patches.