Description
Integer overflow in Windows Explorer in Microsoft Windows XP SP1 might allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large width dimension in a crafted BMP image, as demonstrated by w4intof.bmp.
References
- 23321 vdb-entry
- http://ifsec.blogspot.com/2007/04/several-windows-image-viewers.html
- 20070404 Several Windows image viewers vulnerabilities mailing-list
- 41553 vdb-entry
- 2558 third-party-advisory