CVE-2007-1946 Integer overflow in Windows Explorer in Microsoft Windows XP SP1 might allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large width d...
HighCVSS 10.0
EPSS 26.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in Windows Explorer in Microsoft Windows XP SP1 might allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large width dimension in a crafted BMP image, as demonstrated by w4intof.bmp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows xp | All versions | No fix listed |
References
- ifsec.blogspot.com exploit vendor-advisory
- 41553 vdb-entry
- 2558 third-party-advisory
- 20070404 Several Windows image viewers vulnerabilities mailing-list
- 23321 vdb-entry