What’s Vulnerable › Vulnerabilities

CVE-2009-1511

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 14.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2009-05-01 · updated 2026-06-16
• Weakness: CWE-399

Description

GDI+ in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (infinite loop) via a PNG file that contains a certain large btChunkLen value.

Affected products

• Microsoft Windows XP Service Pack 3: all versions

References

• http://www.securityfocus.com/bid/34586
• https://www.exploit-db.com/exploits/8466
• http://www.securityfocus.com/bid/34586
• https://www.exploit-db.com/exploits/8466

Get alerted when CVE-2009-1511 or the next vulnerability affects your stack