Vulnerability Details CVE-2008-4327
gdiplus.dll in GDI+ in Microsoft Windows XP SP3 does not properly handle crafted .ico files, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a certain crash.ico file on a web site, and allows user-assisted attackers to cause a denial of service (divide-by-zero error and persistent application crash) via this crash.ico file on the desktop, a different vulnerability than CVE-2007-2237.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.201
EPSS Ranking 95.3%
CVSS Severity
CVSS v2 Score 4.3
References
Products affected by CVE-2008-4327
-
cpe:2.3:o:microsoft:windows_xp:-