Microsoft Windows Graphics Device Interface (GDI+, GdiPlus.dll) allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, which triggers a divide-by-zero error.
The product divides a value by zero.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Windows_xp | Microsoft | –sp2 (including) | –sp2 (including) |