Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, .cur, .ico or .ani file with a large image size field, which leads to a buffer overflow, aka the "Cursor and Icon Format Handling Vulnerability."

The remote host contains a version of the Windows kernel that is affected by a security flaw in the way that cursors and icons are handled.  An attacker may be able to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit this web page.  An attacker may send a malicious email to the victim to exploit this flaw too.

Detections

Analytics

CVE-2004-1049

critical

Tenable Plugins

high