2007-09-27 21:17:00 2019-04-30 14:34:27

Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service (CPU consumption) via a certain PNG file with a large tEXt chunk that possibly triggers an integer overflow in PNG chunk size handling, as demonstrated by badlycrafted.png.

Vector

NETWORK

Complexity

MEDIUM

Authentication

NONE

Confidentiality

NONE

Integrity

NONE

Availability

COMPLETE
Microsoft Windows xp - (not an official CPE) Microsoft Windows xp Sp2 X64 (not an official CPE) Microsoft windows xp_sp2 tablet_pc Microsoft Windows xp Sp2 Pro (not an official CPE) Microsoft windows xp_sp2 media_center Microsoft windows xp_sp2 embedded Microsoft Windows XP Service Pack 2 Microsoft windows xp_sp1 tablet_pc Microsoft Windows xp Sp1 Pro (not an official CPE) Microsoft windows xp_sp1 media_center Microsoft Windows xp Sp1 Ibm oem (not an official CPE) Microsoft windows xp_sp1 embedded Microsoft Windows xp Sp1 64bit (not an official CPE) Microsoft Windows XP Service Pack 1 Microsoft windows xp_gold tablet_pc Microsoft Windows xp Gold Pro (not an official CPE) Microsoft windows xp_gold media_center Microsoft Windows XP 64-bit Microsoft windows xp_gold Microsoft windows xp_gold embedded Microsoft Windows xp Tablet pc (not an official CPE) Microsoft Windows xp Media center (not an official CPE) Microsoft Windows xp Pro (not an official CPE) Microsoft Windows xp Ibm oem (not an official CPE) Microsoft Windows xp Embedded (not an official CPE) Microsoft Windows xp 64bit (not an official CPE) Microsoft Windows vista - (not an official CPE) Microsoft Windows vista Gold X64 (not an official CPE) Microsoft Windows vista X64-home basic (not an official CPE) Microsoft Windows Vista gold Microsoft Windows vista X64-business (not an official CPE) Microsoft Windows vista Ultimate (not an official CPE) Microsoft Windows Vista x64 (64-bit) Microsoft Windows vista Home premium (not an official CPE) Microsoft Windows vista Starter (not an official CPE) Microsoft Windows vista Home basic (not an official CPE) Microsoft Windows 2003 server - (not an official CPE) Microsoft Windows Vista Microsoft Windows vista Business (not an official CPE) Microsoft Windows vista Enterprise (not an official CPE) Microsoft windows 2003_sp2 storage Microsoft Windows 2003 server Sp2 Wed (not an official CPE) Microsoft Windows 2003 Server Service Pack 2 x64 (64-bit) Microsoft Windows 2003 server Sp2 Std (not an official CPE) Microsoft windows 2003_sp2 enterprise Microsoft Windows 2003 Server Service Pack 2 Itanium Microsoft windows 2003_sp2 datacenter Microsoft windows 2003_sp2 compute_cluster Microsoft Windows 2003 server Sp1 Wed (not an official CPE) Microsoft Windows 2003 Server Service Pack 2 Microsoft Windows 2003 server Sp1 Std (not an official CPE) Microsoft windows 2003_sp1 storage Microsoft windows 2003_sp1 enterprise Microsoft Windows 2003 Server Service Pack 1 Microsoft windows 2003_sp1 compute_cluster Microsoft windows 2003_sp1 datacenter Microsoft Windows 2003 server R2 X64-std (not an official CPE) Microsoft Windows 2003 Server R2 x64 (64-bit) Datacenter Edtion Microsoft Microsoft Windows 2003 Server R2 x64 (64-bit) Enterprise Edtion Microsoft Windows 2003 Server R2 Gold x64 (64-bit) Microsoft windows 2003_r2 storage Microsoft Windows 2003 server R2 Wed (not an official CPE) Microsoft windows 2003_r2 datacenter Microsoft windows 2003_r2 enterprise Microsoft Windows 2003 server R2 Std (not an official CPE) Microsoft windows 2003_r2 compute_cluster Microsoft Windows 2003 server Gold X64-std (not an official CPE) Microsoft windows 2003_r2 Microsoft Windows 2003 Server Gold x64 (64-bit) Enterprise Edition Microsoft Windows 2003 Server Gold x64 (64-bit) Datacenter Edition Microsoft Windows 2003 server Gold Wed (not an official CPE) Microsoft Windows 2003 Server Gold x64 (64-bit) Microsoft windows 2003_gold storage Microsoft Windows 2003 server Gold Std (not an official CPE) Microsoft Windows 2003 gold itanium Microsoft windows 2003_gold enterprise Microsoft windows 2003_gold datacenter Microsoft windows 2003_gold Microsoft windows 2003_gold compute_cluster Microsoft Windows 2003 server Xp-64bit (not an official CPE) Microsoft Windows 2003 server X64-std (not an official CPE) Microsoft Windows 2003 server X64-enterprise (not an official CPE) Microsoft Windows 2003 server X64 (not an official CPE) Microsoft Windows 2003 server X64-datacenter (not an official CPE) Microsoft Windows 2003 server Wed (not an official CPE) Microsoft Windows 2003 server Std (not an official CPE) Microsoft Windows 2003 server Storage (not an official CPE) Microsoft Windows 2003 server Itanium (not an official CPE) Microsoft Windows 2003 server Enterprise (not an official CPE) Microsoft Windows 2003 server Datacenter (not an official CPE) Microsoft Windows 2003 server Compute cluster (not an official CPE)