Unscored severity · published Mar 24, 2010
CVE-2010-1098
The ANI parser in Microsoft Windows before 7 on the x86 platform, as used in Internet Explorer and other applications, allows remote attackers to cause a denial of service (memory…
–
CVSS
15%
EPSS
No
On KEV
Description
The ANI parser in Microsoft Windows before 7 on the x86 platform, as used in Internet Explorer and other applications, allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted biClrUsed value in the BITMAPINFO header of a .ANI file.
Exploitation
Is it being used?
Exploit prediction (EPSS)15.0% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WV
Windows Vista · Microsoft
All versions, or not specified · source: NVD
WX
Windows XP · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1098
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1098
code.google.com
http://code.google.com/p/skylined/issues/detail?id=3
URL Repurposed
http://skypher.com/index.php/2010/03/08/ani-file-bitmapinfoheader-biclrused-bounds-check-missing/
Exploit
http://www.securityfocus.com/bid/38579
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/56756
More from Windows Vista
9.8
CVE-2008-4250
Microsoft Windows Buffer Overflow Vulnerability
8.8
CVE-2016-7256
Microsoft Windows Open Type Font Remote Code Execution Vulnerability
8.8
CVE-2015-2426
Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability
8.8
CVE-2015-2360
Microsoft Win32k Privilege Escalation Vulnerability
8.8
CVE-2014-6332
Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability