Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service (CPU consumption) via a certain PNG file with a large tEXt chunk that possibly triggers an integer overflow in PNG chunk size handling, as demonstrated by badlycrafted.png.
Vector
NETWORK
Complexity
MEDIUM
Authentication
NONE
Confidentiality
NONE
Integrity
NONE
Availability
COMPLETE
Microsoft Windows xp - (not an official CPE)
Microsoft Windows xp Sp2 X64 (not an official CPE)
Microsoft windows xp_sp2 tablet_pc
Microsoft Windows xp Sp2 Pro (not an official CPE)
Microsoft windows xp_sp2 media_center
Microsoft windows xp_sp2 embedded
Microsoft Windows XP Service Pack 2
Microsoft windows xp_sp1 tablet_pc
Microsoft Windows xp Sp1 Pro (not an official CPE)
Microsoft windows xp_sp1 media_center
Microsoft Windows xp Sp1 Ibm oem (not an official CPE)
Microsoft windows xp_sp1 embedded
Microsoft Windows xp Sp1 64bit (not an official CPE)
Microsoft Windows XP Service Pack 1
Microsoft windows xp_gold tablet_pc
Microsoft Windows xp Gold Pro (not an official CPE)
Microsoft windows xp_gold media_center
Microsoft Windows XP 64-bit
Microsoft windows xp_gold
Microsoft windows xp_gold embedded
Microsoft Windows xp Tablet pc (not an official CPE)
Microsoft Windows xp Media center (not an official CPE)
Microsoft Windows xp Pro (not an official CPE)
Microsoft Windows xp Ibm oem (not an official CPE)
Microsoft Windows xp Embedded (not an official CPE)
Microsoft Windows xp 64bit (not an official CPE)
Microsoft Windows vista - (not an official CPE)
Microsoft Windows vista Gold X64 (not an official CPE)
Microsoft Windows vista X64-home basic (not an official CPE)
Microsoft Windows Vista gold
Microsoft Windows vista X64-business (not an official CPE)
Microsoft Windows vista Ultimate (not an official CPE)
Microsoft Windows Vista x64 (64-bit)
Microsoft Windows vista Home premium (not an official CPE)
Microsoft Windows vista Starter (not an official CPE)
Microsoft Windows vista Home basic (not an official CPE)
Microsoft Windows 2003 server - (not an official CPE)
Microsoft Windows Vista
Microsoft Windows vista Business (not an official CPE)
Microsoft Windows vista Enterprise (not an official CPE)
Microsoft windows 2003_sp2 storage
Microsoft Windows 2003 server Sp2 Wed (not an official CPE)
Microsoft Windows 2003 Server Service Pack 2 x64 (64-bit)
Microsoft Windows 2003 server Sp2 Std (not an official CPE)
Microsoft windows 2003_sp2 enterprise
Microsoft Windows 2003 Server Service Pack 2 Itanium
Microsoft windows 2003_sp2 datacenter
Microsoft windows 2003_sp2 compute_cluster
Microsoft Windows 2003 server Sp1 Wed (not an official CPE)
Microsoft Windows 2003 Server Service Pack 2
Microsoft Windows 2003 server Sp1 Std (not an official CPE)
Microsoft windows 2003_sp1 storage
Microsoft windows 2003_sp1 enterprise
Microsoft Windows 2003 Server Service Pack 1
Microsoft windows 2003_sp1 compute_cluster
Microsoft windows 2003_sp1 datacenter
Microsoft Windows 2003 server R2 X64-std (not an official CPE)
Microsoft Windows 2003 Server R2 x64 (64-bit) Datacenter Edtion
Microsoft Microsoft Windows 2003 Server R2 x64 (64-bit) Enterprise Edtion
Microsoft Windows 2003 Server R2 Gold x64 (64-bit)
Microsoft windows 2003_r2 storage
Microsoft Windows 2003 server R2 Wed (not an official CPE)
Microsoft windows 2003_r2 datacenter
Microsoft windows 2003_r2 enterprise
Microsoft Windows 2003 server R2 Std (not an official CPE)
Microsoft windows 2003_r2 compute_cluster
Microsoft Windows 2003 server Gold X64-std (not an official CPE)
Microsoft windows 2003_r2
Microsoft Windows 2003 Server Gold x64 (64-bit) Enterprise Edition
Microsoft Windows 2003 Server Gold x64 (64-bit) Datacenter Edition
Microsoft Windows 2003 server Gold Wed (not an official CPE)
Microsoft Windows 2003 Server Gold x64 (64-bit)
Microsoft windows 2003_gold storage
Microsoft Windows 2003 server Gold Std (not an official CPE)
Microsoft Windows 2003 gold itanium
Microsoft windows 2003_gold enterprise
Microsoft windows 2003_gold datacenter
Microsoft windows 2003_gold
Microsoft windows 2003_gold compute_cluster
Microsoft Windows 2003 server Xp-64bit (not an official CPE)
Microsoft Windows 2003 server X64-std (not an official CPE)
Microsoft Windows 2003 server X64-enterprise (not an official CPE)
Microsoft Windows 2003 server X64 (not an official CPE)
Microsoft Windows 2003 server X64-datacenter (not an official CPE)
Microsoft Windows 2003 server Wed (not an official CPE)
Microsoft Windows 2003 server Std (not an official CPE)
Microsoft Windows 2003 server Storage (not an official CPE)
Microsoft Windows 2003 server Itanium (not an official CPE)
Microsoft Windows 2003 server Enterprise (not an official CPE)
Microsoft Windows 2003 server Datacenter (not an official CPE)
Microsoft Windows 2003 server Compute cluster (not an official CPE)