exploits , vulnerabilities , articles , Microsoft Windows GDI+ ICO File Remote Denial of Service Vulnerability

Title	Microsoft Windows GDI+ ICO File Remote Denial of Service Vulnerability
Published	2007-06-06-12:00AM
Updated	2007-06-08-01:40AM
Class	Design Error
CVE	CVE-2007-2237
Remote	Yes
Local	No
Credit	Dennis Rand from CSIS Security Group is credited with discovering this issue.
Vulnerable	Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microsoft Windows XP Professional x64 Edition SP2 Microsoft Windows XP Professional x64 Edition Microsoft Windows XP Professional SP2 Microsoft Windows XP Professional SP1 Microsoft Windows XP Professional Microsoft Windows XP Media Center Edition SP2 Microsoft Windows XP Media Center Edition SP1 Microsoft Windows XP Media Center Edition Microsoft Windows XP Home SP2 Microsoft Windows XP Home SP1 Microsoft Windows XP Home Microsoft Windows XP Gold 0 Microsoft Windows XP 64bit Edition Version 2003 SP1 Microsoft Windows XP 64bit Edition Version 2003 Microsoft Windows XP 64bit Edition SP1 Microsoft Windows XP 64bit Edition Microsoft Windows XP 0
Not Vulnerable
Code	Attackers may exploit this issue by crafting and distributing a malicious ICO file. The following exploit is available: /data/vulnerabilities/exploits/24346.ico
TXT