Cisco VPN Client Privilege Escalation

The vulnerability in dne2000.sys of Citrix Deterministic Network Enhancer for Cisco VPN Client, Blue Coat WinProxy, SafeNet SoftRemote, and HighAssurance Remote allows local users to elevate their privileges by using a specially crafted request called DNEIOCTL DeviceIoControl to the \.\DNE device...

Microsoft Lync Server Data Compromise

The vulnerability of the GDI+ component of the Microsoft Lync Attendee User program, related to the processing of specially crafted images, allows for remote execution of code when a user opens a specially crafted image. Exploiting this vulnerability enables a malicious individual to gain full...

CVE-2016-0170

GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted document, aka "Windows Graphics Component RCE...

CVE-2016-0169

GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to obtain sensitive information via a crafted document, aka "Windows Graphics Component...

Microsoft Windows Security Mechanism Bypass Vulnerability (CNVD-2016-00252)

Microsoft Windows is a popular operating system. A security bypass vulnerability exists in Microsoft Windows Graphics Device Interface GDI32.dll, which can be exploited by remote attackers to bypass the ASLR protection mechanism and perform unauthorized operations...

CVE-2016-0008

The graphics device interface in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to bypass the ASLR protection mechanism via unspecified vectors, aka "Windo...

CVE-2016-0008

The graphics device interface in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to bypass the ASLR protection mechanism via unspecified vectors, aka "Windo...

PT-2016-1053

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Description The issue is related to the graphics device interface in Microsoft Windows, which lacks protection for certain data. This allows a remote attacker to bypass the Address Space...

Microsoft Graphics Device Interface Integer Overflow - Ver2 (CVE-2013-3940)

An integer overflow vulnerability has been reported in the way that the Windows Graphics Device Interface GDI processes specially crafted image files. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted Windows Write file. Successful exploitation of this...

Microsoft Windows 2000/XP GDI Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3481/info The Windows Graphics Device Interface GDI is a set of Application Programming Interfaces APIs used to display graphical output. A vulnerability exists which causes the GDI to invoke a Kernel Mode Exception due t...

Microsoft Windows Graphics Device Interface RCE Vulnerability (2876331)

This host is missing a critical security update according to Microsoft Bulletin MS13-089. OpenVAS Vulnerability Test $Id: secpodms13-089.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Graphics Device Interface RCE Vulnerability 2876331 Authors: Shashi Kiran N Copyright: Copyright C 2013...

CVE-2013-3940: Integer Overflow or Wraparound

Integer overflow in the Graphics Device Interface GDI in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to...

Microsoft Windows Graphics Device Interface RCE Vulnerability (2876331)

This host is missing a critical security update according to Microsoft Bulletin MS13-089. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Graphics Device Interface CVE-2013-3940 Remote Integer Overflow Vulnerability

Description Microsoft Windows is prone to a remote integer-overflow vulnerability. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts may result in a denial-of-service condition. Technologies Affect...

Microsoft Graphics Device Interface Integer Overflow (MS13-089; CVE-2013-3901)

A remote code execution vulnerability has been reported in the Windows Graphics Device Interface GDI...

VulnCheck KEV: CVE-2008-2249

Integer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via a malformed header in a crafted WMF file, which triggers a buffer overflow, aka "GDI Integer Overflow...

CVE-2011-5046

The Graphics Device Interface GDI in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows remote attackers...

Microsoft Windows GDIplus GpFont.SetData Integer Overflow (CVE-2009-1217)

A vulnerability has been reported in Microsoft Windows Graphics Device Interface GDI. The problem is caused by improper handling the length of EmfPlusFont in EMF files. Remote attackers can exploit this vulnerability by enticing target users to open a specially crafted EMF file. Triggering this...

Input validation

The Graphics Device Interface GDI in win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, a...

PT-2009-4920 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 Description: The issue arises from the Graphics Device Interface GDI in the kernel not properly...