GDI+ in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (infinite loop) via a PNG file that contains a certain large btChunkLen value.
- https://www.exploit-db.com/exploits/8466
No PoCs found on GitHub currently.