Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security VulnWatch
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

[VulnWatch] CSIS Advisory: Microsoft GDI+ Integer division by zero flaw

from [Dennis Rand] Network Security [Permanent Link]
Subject: [VulnWatch] CSIS Advisory: Microsoft GDI+ Integer division by zero flaw handling .ICO files
Date: Wed, 6 Jun 2007 12:38:32 +0200 
CSIS Security Group has discovered an "Integer division by zero" flaw in
the GDI+
component in Windows XP. This condition are activated when a malformed
ICO file
are viewed through either Windows Explorer or other components like
"Windows
Picture and Fax Viewer".

The consequence of this flaw is a Denial of Service condition and doing
a restart of
the explorer process.

Further exploitation has not been verified.

The full advisory can be downloaded at the following link: 
http://www.csis.dk/dk/forside/GdiPlus.pdf


Best Regards
Dennis Rand
Malware/Security Researcher
CSIS Security Group
http://www.csis.dk
[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
  • [VulnWatch] CSIS Advisory: Microsoft GDI+ Integer division by zero flaw handling .ICO files, Dennis Rand <=
Previous by Date:  [Full-disclosure] iDefense Security Advisory 06.05.07: Symantec Ghost Multiple Denial of Service Vulnerabilities, iDefense Labs
Next by Date:  [Full-disclosure] iDefense Security Advisory 06.07.07: Linux Kernel cpuset tasks Information Disclosure Vulnerability, iDefense Labs
Previous by Thread:  [Full-disclosure] iDefense Security Advisory 06.05.07: Symantec Ghost Multiple Denial of Service Vulnerabilities, iDefense Labs
Next by Thread:  [Full-disclosure] iDefense Security Advisory 06.07.07: Linux Kernel cpuset tasks Information Disclosure Vulnerability, iDefense Labs
Indexes:  [Date] [Thread] [Top] [All Lists]