CVE-2007-2237: Microsoft Windows XP

Medium severity, CVSS 5.5. EPSS: 15.4% chance of exploitation in the next 30 days.

Microsoft Windows Graphics Device Interface (GDI+, GdiPlus.dll) allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, which triggers a divide-by-zero error.

Affected products

• Microsoft Windows XP: affected versions not specified

Published 2007-06-06. Last modified 2026-06-16.