Microsoft Paint Memory Corruption Denial Of Service Vulnerability
BID:43322
Info
Microsoft Paint Memory Corruption Denial Of Service Vulnerability
| Bugtraq ID: | 43322 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 18 2010 12:00AM |
| Updated: | Sep 18 2010 12:00AM |
| Credit: | andrew hayn |
| Vulnerable: |
Microsoft Windows XP Professional SP2 |
| Not Vulnerable: | |
Discussion
Microsoft Paint Memory Corruption Denial Of Service Vulnerability
Microsoft Paint is prone to a denial-of-service vulnerability due to a memory-corruption issue.
An attacker can exploit this issue to crash the affected application, denying service to legitimate users. Due to the nature of this issue, arbitrary code execution may be possible; however, this has not been confirmed.
Microsoft Paint is prone to a denial-of-service vulnerability due to a memory-corruption issue.
An attacker can exploit this issue to crash the affected application, denying service to legitimate users. Due to the nature of this issue, arbitrary code execution may be possible; however, this has not been confirmed.
Exploit / POC
Microsoft Paint Memory Corruption Denial Of Service Vulnerability
The following proof of concept is available:
The following proof of concept is available:
Solution / Fix
Microsoft Paint Memory Corruption Denial Of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
Microsoft Paint Memory Corruption Denial Of Service Vulnerability
References:
References:
- Microsoft Homepage (Microsoft)