Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2005-4560

83
FAUCET Score

CVE-2005-4560 describes a critical remote code execution vulnerability in the GDI32.DLL library within Microsoft Windows 2003 Server and XP. Attackers can exploit this by crafting a malicious Windows Metafile (WMF) image containing a specially formed SETABORTPROC GDI Escape function call. This vulnerability carries a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not currently in CISA's KEV catalog, exploit modules exist in Metasploit, and its EPSS score of 0.90269 suggests a high likelihood of exploitation, despite minimal community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
enterpriseCPE matchmatch criteria
cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*
enterpriseCPE matchmatch criteria
cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:*
r2CPE matchmatch criteria
cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*
r2CPE matchmatch criteria
cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:*
standardCPE matchmatch criteria
cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

7.5HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P

Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
6.4
CvssVersion
2.0

Exploit Intelligence

EPSS Score
86.48%
Probability of exploitation in next 30 days
EPSS Percentile
99.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
Metasploit: Windows XP/2003/Vista Metafile Escape() SetAbortProc Code Execution · Dec 27, 2005
ExploitDB: EDB-16612 · Sep 20, 2010
This CVE's current EPSS score of 0.8648 is in the 100th percentile among its peer group of 51,551 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (1)

microsoftvendor investigatingvia nvd_reference
View patch

References

linuxbox.org / pipermail/funsec/2006-January/002455.html
docs.microsoft.com / en-us/security-updates/securitybulletins/2006/ms06-001
secunia.com / advisories/18255
Vendor Advisory
secunia.com / advisories/18311
Vendor Advisory
secunia.com / advisories/18364
Vendor Advisory
secunia.com / advisories/18415
Vendor Advisory
securitytracker.com / id
Exploit
exchange.xforce.ibmcloud.com / vulnerabilities/23846
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1431
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1433
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1460
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1492
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1564
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1612
support.avaya.com / elmodocs2/security/ASA-2006-001.htm
Vendor Advisory
vil.mcafeesecurity.com / vil/content/v_137760.htm
Vendor Advisory
www130.nortelnetworks.com / cgi-bin/eserv/cs/main.jsp
www130.nortelnetworks.com / cgi-bin/eserv/cs/main.jsp
f-secure.com / weblog/archives/archive-122005.html
ExploitVendor Advisory
kb.cert.org / vuls/id/181038
Third Party AdvisoryUS Government Resource
microsoft.com / technet/security/advisory/912840.mspx
Vendor Advisory
securityfocus.com / archive/1/420288/100/0/threaded
securityfocus.com / archive/1/420351/100/0/threaded
securityfocus.com / archive/1/420357/100/0/threaded
securityfocus.com / archive/1/420367/100/0/threaded
securityfocus.com / archive/1/420378/100/0/threaded
securityfocus.com / archive/1/420446/100/0/threaded
securityfocus.com / archive/1/420546/30/7730/threaded
securityfocus.com / archive/1/420664/30/7730/threaded
securityfocus.com / archive/1/420682/100/0/threaded
securityfocus.com / archive/1/420684/100/0/threaded
securityfocus.com / archive/1/420687/100/0/threaded
securityfocus.com / archive/1/420773/100/0/threaded
securityfocus.com / bid/16074
Exploit
us-cert.gov / cas/techalerts/TA05-362A.html
Third Party AdvisoryUS Government Resource
us-cert.gov / cas/techalerts/TA06-005A.html
Third Party AdvisoryUS Government Resource
vupen.com / english/advisories/2005/3086
Vendor Advisory