CVE-2005-1219

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 49.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-07-12 · updated 2026-06-16

Description

Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags.

Affected products

Microsoft Image Color Management: all versions

References

http://secunia.com/advisories/16004/
http://www.kb.cert.org/vuls/id/720742
http://www.securityfocus.com/bid/14214
http://www.us-cert.gov/cas/techalerts/TA05-193A.html
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-036
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1125
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1280
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A330
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A440
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A769
http://secunia.com/advisories/16004/
http://www.kb.cert.org/vuls/id/720742

Get alerted when CVE-2005-1219 or the next vulnerability affects your stack