Lucene search
HistoryMar 24, 2010 - 10:44 p.m.
CVE-2010-1098
microsoft windows
ani parser
cve-2010-1098
denial of service
memory consumption
cpu consumption
7.1 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
6.6 Medium
AI Score
Confidence
High
0.019 Low
EPSS
Percentile
88.6%
The ANI parser in Microsoft Windows before 7 on the x86 platform, as used in Internet Explorer and other applications, allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted biClrUsed value in the BITMAPINFO header of a .ANI file.
Affected configurations
Node
microsoftwindows_vistax86
ORmicrosoftwindows_xpx86
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:windows_vista | microsoft windows vista | eq | * |
| microsoft:windows_xp | microsoft windows xp | eq | * |
Related
openvas
openvas
Microsoft Windows '.ani' file Denial of Service vulnerability
2010-03-30 00:00:00
Microsoft Windows '.ani' file Denial of Service vulnerability
2010-03-30 00:00:00
prion
prion
Code injection
2010-03-24 22:44:00
cvelist
cvelist
CVE-2010-1098
2010-03-24 17:00:00
nvd
nvd
CVE-2010-1098
2010-03-24 22:44:14
7.1 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
6.6 Medium
AI Score
Confidence
High
0.019 Low
EPSS
Percentile
88.6%
Related for CVE-2010-1098