Denial of Service Vulnerability in Microsoft Windows 98SE via Icon Files

CVE-2005-1793

Summary

The User32.DLL component in Microsoft Windows 98SE is susceptible to a denial of service attack, which can be executed by local or remote attackers. This vulnerability arises when processing icon (.ico) bitmap files that possess excessively large width and height attributes. An attacker can exploit this flaw to crash the system, thereby interrupting normal operations and potentially allowing further exploitation.

References