Description
Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits value.
References
- oval:org.mitre.oval:def:216 vdb-entry signature
- oval:org.mitre.oval:def:322 vdb-entry signature
- VU#266926 third-party-advisory
- 20040215 GAYER THAN AIDS ADVISORY #01: IE 5 remote code execution mailing-list
- oval:org.mitre.oval:def:306 vdb-entry signature
- MS04-025 vendor-advisory
- oval:org.mitre.oval:def:515 vdb-entry signature
- TA04-212A third-party-advisory
- oval:org.mitre.oval:def:507 vdb-entry signature
- ie-bmp-integer-overflow(15210) vdb-entry