| Definition Id: oval:org.mitre.oval:def:3355 |
Version: 4
Last Modified: 2008-02-28
|
| Title: |
LoadImage Cursor and Icon Format Handling Vulnerability (NT 4.0) |
| Description: |
Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, .cur, .ico or .ani file with a large image size field, which leads to a buffer overflow, aka the "Cursor and Icon Format Handling Vulnerability." |
| Family: |
windows |
Class: |
vulnerability |
| Status: |
ACCEPTED |
Reference(s): |
CVE-2004-1049
|
| Platform(s): |
Microsoft Windows NT |
Product(s): |
Cursor and Icon Formatting |
| Definition Synopsis: |
|
|