## https://sploitus.com/exploit?id=SAINT:1CB79BACE1E576202D793F322D4FC7AB
Added: 04/27/2006
CVE: [CVE-2004-1049](<https://vulners.com/cve/CVE-2004-1049>)
BID: [12233](<http://www.securityfocus.com/bid/12233>)
OSVDB: [12842](<http://www.osvdb.org/12842>)
### Background
The [LoadImage](<http://msdn.microsoft.com/en-us/library/ms648045.aspx>) API in Microsoft Windows provides functions for loading cursors, animated cursors, and icons.
### Problem
An integer overflow in the LoadImage API allows command execution when a user opens a specially crafted cursor or icon file.
### Resolution
Apply the patch referenced in [Microsoft Security Bulletin 05-002](<http://www.microsoft.com/technet/security/Bulletin/MS05-002.mspx>).
### References
<http://www.kb.cert.org/vuls/id/625856>
### Limitations
This exploit requires a user to load the exploit into a browser. Due to the nature of the vulnerability, success of the exploit depends upon the system state.
### Platforms
Windows