CVE:CVE-2004-1305
CNNVD:CNNVD-200412-109
ANI是WINDOWS 支持的动画光标格式.
WINDOWS在处理错误的光标格式的时候存在问题，远程攻击者可以利用这个漏洞使内核崩溃，蓝屏重启或内核被拒绝服务。
ANI是WINDOWS 支持的动画光标格式，在ANI是由多个普通的光标文件组成一个动画，其中ANI   文件的头处会标记是几个图标frame，WINDOWS 的内核在显示光标的时候并未对该值进行检查，如果将这个数字设置为0，会导致受影响的WINDOWS系统计算出错误的光标的地址并加以访问，触发了内核的蓝屏崩溃。不仅仅是应用使用ANI文件时会触发，只要在EXPLORER下打开ANI文件存在的目录就会触发。攻击者也可以发送光标的文件，引诱用户访问含有恶意光标显示的页面，以及发送嵌入光标的HTML邮件，导致被攻击者系统蓝屏崩溃。
另外ANI文件的头处会标记每FRAME切换的频率，该值越小切换的速度越快，WINDOWS 的内核在切换光标FRAME的时候并未对该值进行检查，如果将这个数字设置为0，受影响的WINDOWS的内核会 陷入内核的死锁，不再响应任何用户界面的操作。该漏洞触发必须要在使用ANI文件的应用中才能触发，攻击者引诱用户访问含有恶意光标显示的页面，以及发送嵌入光标的HTML邮件，导致被攻击者系统内核死琐。
solution:Upgrade nortel ip_softphone_2050 to a higher version than *; Upgrade nortel media_communication_server_5100 to a higher version than 3.0,and avoid the version 3.0; Upgrade nortel media_communication_server_5200 to a higher version than 3.0,and avoid the version 3.0; Upgrade nortel media_processing_server to a higher version than *; Upgrade nortel periphonics to a higher version than *; Upgrade nortel symposium_agent to a higher version than *; Upgrade nortel symposium_network_control_center to a higher version than *; Upgrade nortel symposium_tapi_service_provider to a higher version than *; Upgrade nortel symposium_web_centre_portal to a higher version than *; Upgrade nortel symposium_web_client to a higher version than *; Upgrade nortel symposium_call_center_server to a higher version than *; Upgrade nortel symposium_express_call_center to a higher version than *; Upgrade microsoft windows_2000 to a higher version than *,*:sp1,*:sp2,*:sp3,*:sp4,and avoid the version *:sp1,*:sp2,*:sp3,*:sp4; Upgrade microsoft windows_2003_server to a higher version than enterprise,enterprise_64-bit,r2,standard,web,and avoid the version enterprise,enterprise_64-bit,r2,standard,web; Upgrade microsoft windows_98 to a higher version than *:gold,and avoid the version *:gold; Upgrade microsoft windows_98se to a higher version than *; Upgrade microsoft windows_me to a higher version than *; Upgrade microsoft windows_nt to a higher version than 4.0,4.0:sp1,4.0:sp2,4.0:sp3,4.0:sp4,4.0:sp5,4.0:sp6,4.0:sp6a,and avoid the version 4.0,4.0:sp1,4.0:sp2,4.0:sp3,4.0:sp4,4.0:sp5,4.0:sp6,4.0:sp6a; Upgrade microsoft windows_xp to a higher version than *,*:gold,*:sp1,*:sp2,and avoid the version *:gold,*:sp1,*:sp2