CVE-2007-2237

MEDIUM 5.5CVE-2007-2237 · Published 06/06/2007 · updated 16/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Microsoft Windows Graphics Device Interface (GDI+, GdiPlus.dll) allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, which triggers a divide-by-zero error.

References

osvdb.org/38494 · Broken Link
csis.dk/dk/forside/GdiPlus.pdf · Broken Link
kb.cert.org/vuls/id/290961 · Third Party Advisory
securityfocus.com/archive/1/470746/100/0/threaded · Broken Link
securityfocus.com/bid/24346 · Broken Link
securitytracker.com/id · Broken Link
vupen.com/english/advisories/2007/2083 · Broken Link
exchange.xforce.ibmcloud.com/vulnerabilities/34743 · VDB Entry
exploit-db.com/exploits/4044 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free