CVE-2007-5133 Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service (CPU consumption) via a certain PNG file with a large tEXt chunk that possibly triggers an....
HighCVSS 7.1
EPSS 22.9%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service (CPU consumption) via a certain PNG file with a large tEXt chunk that possibly triggers an integer overflow in PNG chunk size handling, as demonstrated by badlycrafted.png.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2003 server | All versions | No fix listed |
| Microsoft windows server 2003 | All versions | No fix listed |
| Microsoft windows vista | All versions | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
| 3ware 3dm disk management software | All versions | No fix listed |
References
- 45521 vdb-entry
- 20070925 Possible Windows Explorer bad PNG file preview integer overflow handling mailing-list
- 20070926 Re: Confirmed: Windows Explorer bad PNG file preview integer overflow handling mailing-list
- 20070927 Re: Re: Re: Confirmed: Windows Explorer bad PNG file preview integer overflow handling mailing-list
- 20070927 Re: Possible Windows Explorer bad PNG file preview integer overflow handling mailing-list
- 20070927 Re: Re: Re: Re: Confirmed: Windows Explorer bad PNG file preview integer overflow handling mailing-list
- 25816 exploit vdb-entry