CVE-2004-1049observed exploitation

CVE-2004-1049

Published · Updated

Follow this CVE

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

37Vexday Risk Score

Prioritize patching. It exploitation observed in the wild.

ssvc Attendepss 30%
from disclosure to weapon
Published on NVDJan 19
Observed exploitation+1928d
Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, .cur, .ico or .ani file with a large image size field, which leads to a buffer overflow, aka the "Cursor and Icon Format Handling Vulnerability."
Affected products
n/a · n/a