vendor:
Windows XP
by:
Ac!dDrop
7.5
CVSS
HIGH
Heap Overflow
119
CWE
Product Name: Windows XP
Affected Version From: Windows XP Sp2
Affected Version To: Internet explorer 6.0.2900.2180
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2008
CreateDIBPatternBrushPt Heap Overflow DOS
This vulnerability causes Explorer.exe to crash and causes Internet explorer to close silently. It is a work in progress and the author is still trying to make it run arbitrary code.
Mitigation:
Ensure that all software is up to date and patched with the latest security updates.