QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2004-1049

Back to search

CVE-2004-1049

Published: Jan 19, 2005

Modified: Aug 8, 2024

PUBLISHED

Description

Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, .cur, .ico or .ani file with a large image size field, which leads to a buffer overflow, aka the "Cursor and Icon Format Handling Vulnerability."

VendorProductVersions

n/a

n/a

affected
n/a

References

13645
third-party-advisory
x_refsource_SECUNIA
oval:org.mitre.oval:def:3220
vdb-entry
signature
x_refsource_OVAL
oval:org.mitre.oval:def:3097
vdb-entry
signature
x_refsource_OVAL
MS05-002
vendor-advisory
x_refsource_MS
oval:org.mitre.oval:def:2956
vdb-entry
signature
x_refsource_OVAL
1012684
vdb-entry
x_refsource_SECTRACK
win-loadimage-bo(18668)
vdb-entry
x_refsource_XF
P-094
third-party-advisory
government-resource
x_refsource_CIAC
oval:org.mitre.oval:def:3355
vdb-entry
signature
x_refsource_OVAL
12095
vdb-entry
x_refsource_BID
TA05-012A
third-party-advisory
x_refsource_CERT
oval:org.mitre.oval:def:4671
vdb-entry
signature
x_refsource_OVAL
12623
vdb-entry
x_refsource_OSVDB
VU#625856
third-party-advisory
x_refsource_CERT-VN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now