vendor:
Windows
by:
Unknown
5.5
CVSS
MEDIUM
Denial-of-Service
20
CWE
Product Name: Windows
Affected Version From: Windows XP SP2
Affected Version To: Windows Vista
Patch Exists: NO
Related CWE: CVE-2007-0038
CPE: o:microsoft:windows
Platforms Tested: Windows
2007
Denial-of-Service Vulnerability in Microsoft Windows Explorer
Microsoft Windows Explorer is prone to a denial-of-service vulnerability because it fails to handle malformed PNG image files. Attackers can exploit this issue to cause Windows Explorer to exhaust CPU cycles and become unresponsive.
Mitigation:
There is no known mitigation for this vulnerability at the moment.