Microsoft GDI+ Library Malformed JPEG Handling Unspecified Denial of Service Vulnerability
BID:11251
Info
Microsoft GDI+ Library Malformed JPEG Handling Unspecified Denial of Service Vulnerability
| Bugtraq ID: | 11251 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 27 2004 12:00AM |
| Updated: | Sep 27 2004 12:00AM |
| Credit: | This issue was reported by Andreas Marx <[email protected]>. |
| Vulnerable: |
Microsoft Windows XP Professional SP2 Microsoft Windows XP Professional SP1 Microsoft Windows XP Professional Microsoft Windows XP Home SP2 Microsoft Windows XP Home SP1 Microsoft Windows XP Home Microsoft Windows 2000 Server SP4 Microsoft Windows 2000 Server SP3 Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server Microsoft Windows 2000 Professional SP4 Microsoft Windows 2000 Professional SP3 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows 2000 Datacenter Server SP4 Microsoft Windows 2000 Datacenter Server SP3 Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Advanced Server SP4 Microsoft Windows 2000 Advanced Server SP3 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server |
| Not Vulnerable: | |
Discussion
Microsoft GDI+ Library Malformed JPEG Handling Unspecified Denial of Service Vulnerability
The Microsoft (Graphics Device Interface) GDI+ library is reported prone to an unspecified denial of service vulnerability when handling malformed JPEG files.
This issue is reported to present itself due to the dereferencing of a NULL pointer.
Due to a lack of details, further information is not available at the moment. This BID will be updated as more information becomes available.
The Microsoft (Graphics Device Interface) GDI+ library is reported prone to an unspecified denial of service vulnerability when handling malformed JPEG files.
This issue is reported to present itself due to the dereferencing of a NULL pointer.
Due to a lack of details, further information is not available at the moment. This BID will be updated as more information becomes available.
Exploit / POC
Microsoft GDI+ Library Malformed JPEG Handling Unspecified Denial of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Microsoft GDI+ Library Malformed JPEG Handling Unspecified Denial of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Microsoft GDI+ Library Malformed JPEG Handling Unspecified Denial of Service Vulnerability
References:
References:
- Re: Microsoft's GDI Detetection Tool faults (Andreas Marx