CVE-2005-4560: Microsoft Windows 2003 Server

High severity, CVSS 7.5. EPSS: 86.1% chance of exploitation in the next 30 days.

The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbitrary code via a Windows Metafile (WMF) format image with a crafted SETABORTPROC GDI Escape function call, related to the Windows Picture and Fax Viewer (SHIMGVW.DLL), a different vulnerability than CVE-2005-2123 and CVE-2005-2124, and as originally discovered in the wild on unionseek.com.

Affected products

• Microsoft Windows 2003 Server: version enterprise only; version r2 only; version standard only; version web only
• Microsoft Windows XP: any version

Published 2005-12-28. Last modified 2026-06-16.