Re: CSIS Advisory: Microsoft GDI+ Integer division by zero flaw handling .ICO files

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: CSIS Advisory: Microsoft GDI+ Integer division by zero flaw handling .ICO files
From: H D Moore <sflist@xxxxxxxxxxxxxxxxxx>
Date: Thu, 7 Jun 2007 10:34:17 -0500
Cc: "Dennis Rand" <rand@xxxxxxx>
In-reply-to: <C81131AE0CE8FC48B5B3D1F888FE33A3976040@xxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <C81131AE0CE8FC48B5B3D1F888FE33A3976040@xxxxxxxxxxxxxxx>
User-agent: KMail/1.9.3

Looks like this mangled ICO will also kill Gimp :-) [2.3.14]

On Thursday 07 June 2007 04:21, Dennis Rand wrote:
> Further exploitation has not been verified.

References:
- CSIS Advisory: Microsoft GDI+ Integer division by zero flaw handling .ICO files
  - From: Dennis Rand

Prev by Date: Re: uTorrent overflow
Next by Date: MIT krb5: makes sudo authentication issue MUCH worse.
Previous by thread: CSIS Advisory: Microsoft GDI+ Integer division by zero flaw handling .ICO files
Next by thread: W1L3D4 WEBmarket Remote SQL İnjection
Index(es):
- Date
- Thread