CVE

Id
25594  
CVE No.
CVE-2007-2237  
Status
Candidate  
Description
Microsoft Windows Graphics Device Interface (GDI+, GdiPlus.dll) allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, which triggers a divide-by-zero error.  
Phase
Assigned (20070425)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
255718 25594 CVE-2007-2237 BUGTRAQ:20070607 CSIS Advisory: Microsoft GDI+ Integer division by zero flaw handling .ICO files  View
255719 25594 CVE-2007-2237 URL:http://www.securityfocus.com/archive/1/archive/1/470746/100/0/threaded  View
255720 25594 CVE-2007-2237 MILW0RM:4044  View
255721 25594 CVE-2007-2237 URL:http://www.milw0rm.com/exploits/4044  View
255722 25594 CVE-2007-2237 MISC:http://www.csis.dk/dk/forside/GdiPlus.pdf  View
255723 25594 CVE-2007-2237 CERT-VN:VU#290961  View
255724 25594 CVE-2007-2237 URL:http://www.kb.cert.org/vuls/id/290961  View
255725 25594 CVE-2007-2237 BID:24346  View
255726 25594 CVE-2007-2237 URL:http://www.securityfocus.com/bid/24346  View
255727 25594 CVE-2007-2237 OSVDB:38494  View
255728 25594 CVE-2007-2237 URL:http://osvdb.org/38494  View
255729 25594 CVE-2007-2237 VUPEN:ADV-2007-2083  View
255730 25594 CVE-2007-2237 URL:http://www.vupen.com/english/advisories/2007/2083  View
255731 25594 CVE-2007-2237 SECTRACK:1018202  View
255732 25594 CVE-2007-2237 URL:http://www.securitytracker.com/id?1018202  View
255733 25594 CVE-2007-2237 XF:windows-gdi-dos(34743)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53191 JVNDB-2007-001883 AXIS および Panorama PTZ の SaveBMP メソッドにおけるスタックベースのバッファオーバーフローの脆弱性 AXIS および Panorama PTZ の AxisCamControl.ocx 内の AXIS Camera Control ActiveX コントロールにある SaveBMP メソッドには、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2007-2239 25594 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001883.html  View