← Database

CVE-2007-2237

MEDIUM CVSS: 5.5 Published: 2007-06-06 Modified: 2026-06-16

Description

Microsoft Windows Graphics Device Interface (GDI+, GdiPlus.dll) allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, which triggers a divide-by-zero error.

Affected Platforms

Microsoft Windows Xp

Weakness Type

CWE-369

References