Microsoft Internet Explorer Bitmap Processing Integer Overflow Vulnerability

Microsoft Internet Explorer Bitmap Processing Integer Overflow Vulnerability

Microsoft Internet Explorer has been reported prone to an integer overflow vulnerability. The issue presents itself in bitmap file processing procedures and is due to the use of a signed integer employed during boundary checking routines.

Ultimately an attacker may exploit this condition to corrupt a saved instruction or stack frame base pointer, to influence execution flow of the affected browser into attacker-supplied instructions.

This issue could also be exposed via other software that uses Internet Explorer to render images, such as Outlook, though this has not been confirmed.