CVE-2004-1049

CVE-2004-1049 describes an integer overflow in the LoadImage API of USER32.dll affecting various Microsoft Windows versions, including 2000, 2003 Server, NT, and XP. This flaw allows remote attackers to execute arbitrary code by crafting malicious .bmp, .cur, .ico, or .ani files with oversized image size fields, leading to a buffer overflow. The vulnerability has a CVSS score of 5.1, indicating a medium severity with a network attack vector and high attack complexity, potentially leading to partial confidentiality, integrity, and availability compromise. While there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB) is unavailable, and it is not listed on the KEV catalog, it has garnered significant community discussion with 10 mentions.