CVE-2005-1211

An attacker crafts a malicious PNG file that triggers a buffer overflow when Internet Explorer renders the image. The attacker hosts the crafted PNG on a website or sends it in an HTML email, and convinces the user to view the page or message. Successful exploitation allows remote code execution in the context of the logged-on user [ref_id=1].

The vulnerability exists in the PNG image rendering component of Microsoft Internet Explorer. The advisory does not specify the exact function or file name responsible for the flaw [ref_id=1].

The security update (MS05-025) modifies the PNG image rendering code in Internet Explorer to properly validate PNG data before processing, preventing the buffer overflow. The advisory states that the update "resolves the vulnerability by modifying the way that Internet Explorer validates the length of a PNG image file before it passes it to the allocated buffer" [ref_id=1]. No patch diff is available in the bundle.