NVD Vulnerability Detail

CVE-2007-2237

Summary	Microsoft Windows Graphics Device Interface (GDI+, GdiPlus.dll) allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, which triggers a divide-by-zero error.
Summary	Microsoft Windows Graphics Device Interface (GDI+, GdiPlus.dll) permite a atacantes remotos dependientes de contexto provocar una denegación de servicio (caída) mediante un fichero ICO con una información de cabecera (InfoHeader) con una altura de cero, lo cual provoca un error de división por cero.
Publication Date	June 7, 2007, 5:30 a.m.
Registration Date	Jan. 29, 2021, 2:11 p.m.
Last Update	April 23, 2026, 9:35 a.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:o:microsoft:windows_xp:-:sp2::::::

Related information, measures and tools

No	URL	refsource
1	http://osvdb.org/38494	cret@cert.org
2	http://www.csis.dk/dk/forside/GdiPlus.pdf	cret@cert.org
3	http://www.kb.cert.org/vuls/id/290961	cret@cert.org
4	http://www.securityfocus.com/archive/1/470746/100/0/threaded	cret@cert.org
5	http://www.securityfocus.com/bid/24346	cret@cert.org
6	http://www.securitytracker.com/id?1018202	cret@cert.org
7	http://www.vupen.com/english/advisories/2007/2083	cret@cert.org
8	https://exchange.xforce.ibmcloud.com/vulnerabilities/34743	cret@cert.org
9	https://www.exploit-db.com/exploits/4044	cret@cert.org
10	http://osvdb.org/38494	af854a3a-2127-422b-91ae-364da2661108
11	http://www.csis.dk/dk/forside/GdiPlus.pdf	af854a3a-2127-422b-91ae-364da2661108
12	http://www.kb.cert.org/vuls/id/290961	af854a3a-2127-422b-91ae-364da2661108
13	http://www.securityfocus.com/archive/1/470746/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108
14	http://www.securityfocus.com/bid/24346	af854a3a-2127-422b-91ae-364da2661108
15	http://www.securitytracker.com/id?1018202	af854a3a-2127-422b-91ae-364da2661108
16	http://www.vupen.com/english/advisories/2007/2083	af854a3a-2127-422b-91ae-364da2661108
17	https://exchange.xforce.ibmcloud.com/vulnerabilities/34743	af854a3a-2127-422b-91ae-364da2661108
18	https://www.exploit-db.com/exploits/4044	af854a3a-2127-422b-91ae-364da2661108

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-369	ゼロ除算	https://cwe.mitre.org/data/definitions/369.html

JVN Vulnerability Information

Microsoft Windows Graphics Device Interface におけるサービス運用妨害 (DoS) の脆弱性

Title	Microsoft Windows Graphics Device Interface におけるサービス運用妨害 (DoS) の脆弱性
Summary	Microsoft Windows Graphics Device Interface (GDI+、GdiPlus.dll) には、サービス運用妨害 (クラッシュ) 状態となる脆弱性が存在します。
Possible impacts	第三者により、ゼロの高さを含んでいる InfoHeader を伴う ICO ファイルを介して、ゼロ除算のエラーを誘発され、サービス運用妨害 (クラッシュ) 状態にされる可能性があります。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	June 6, 2007, midnight
Registration Date	Sept. 25, 2012, 4:47 p.m.
Last Update	Sept. 25, 2012, 4:47 p.m.

Affected System

マイクロソフト

Microsoft Windows XP sp3

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2007-2237	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2237
National Vulnerability Database (NVD)
2	CVE-2007-2237	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-2237

ベンダー情報

No	Name	URL
Microsoft
1	Windows XP	http://windows.microsoft.com/en-US/windows/products/windows-xp

その他

No	Name	URL
US-CERT Vulnerability Note
1	VU#290961	http://www.kb.cert.org/vuls/id/290961

Change Log

No	Changed Details	Date of change
0	[2012年09月25日] 掲載	Feb. 17, 2018, 10:37 a.m.