CVE-2004-1049

Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, .cur, .ico or .ani…

published January 19, 2005

CVSS

—

EPSS

30%

Percentile

98.2

In the wild

Unconfirmed

What it is

Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, .cur, .ico or .ani file with a large image size field, which leads to a buffer overflow, aka the "Cursor and Icon Format Handling Vulnerability."

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.30127 · 98.2th percentile
Published: 2005-01-19T05:00Z

EPSS history

Timeline

19 JAN 05:00Z
Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, .cur, .ico or .ani…
cvelistv5