CVE-2007-2237

Microsoft Windows Graphics Device Interface (GDI+, GdiPlus.dll) allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an…

published June 6, 2007

CVSS
—
EPSS
15%
Percentile
96.8
In the wild
Unconfirmed
What it is

Microsoft Windows Graphics Device Interface (GDI+, GdiPlus.dll) allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, which triggers a divide-by-zero error.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.15424 · 96.8th percentile
Published
2007-06-06T20:00Z
EPSS history
Timeline
  • 06 JUN 20:00Z
    Microsoft Windows Graphics Device Interface (GDI+, GdiPlus.dll) allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an…
    cvelistv5