CVE-2007-1946: Integer Overflow

Published Apr 11, 2007

Updated

Integer overflow in Windows Explorer in Microsoft Windows XP SP1 might allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large width dimension in a crafted BMP image, as demonstrated by w4intof.bmp.

Affected Software

1 affected component

Microsoft Windows XP=sp1

Event History

Apr 11, 2007

CVE Published

01:19 AM

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1946?

CVE-2007-1946 has a severity rating of moderate due to its potential to cause denial of service and arbitrary code execution.

How do I fix CVE-2007-1946?

To fix CVE-2007-1946, update Microsoft Windows XP to a newer service pack or apply relevant security patches provided by Microsoft.

What systems are affected by CVE-2007-1946?

CVE-2007-1946 specifically affects Microsoft Windows XP with Service Pack 1.

What type of vulnerability is CVE-2007-1946?

CVE-2007-1946 is classified as an integer overflow vulnerability.

Can CVE-2007-1946 be exploited remotely?

Yes, CVE-2007-1946 can be exploited by remote attackers via specially crafted BMP images.