Computer Security
[EN] securityvulns.ru
no-pyccku



Related information

  Microsoft Windows Explorer PNG DoS

From:rocheml_(at)_httrack.com <rocheml_(at)_httrack.com>
Date:26.09.2007
Subject:Possible Windows Explorer bad PNG file preview integer overflow handling

Hi folks,

Can anyone confirm that the attached PNG file is causing Explorer to eat
100% CPU, and if this is a known issue ?

(Currently tested with an up-to-date Windows XP and Windows Vista)

The probable cause is an integer overflow in the PNG chunk size handling,
which is 32-bit large, and which can cause a 32-bit counter to overflow
when specifically designed for (the attached file contains an tEXt chunk
which is 0xfffffff4 bytes large), leading to bypass size checking and
causing counters to go backward.

(Other applications handling PNG files might be affected)


Regards,
Xavier Roche

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod

 
 



Rating@Mail.ru