Heap overflow

Heap-based buffer overflow in the Office GDI+ library in Microsoft Office 2003 SP3 and 2007 SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted EMF image in an Office document, aka "GDI+ Heap Overflow Vulnerability."...

Microsoft GDI+ CVE-2012-0165 EMF Image Processing Remote Code Execution Vulnerability

Description Microsoft GDI+ is prone to a remote code-execution vulnerability that occurs when an application using the library tries to process a specially crafted Enhanced Metafile EMF image. An attacker can exploit this issue to execute arbitrary code with the privileges of the currently...

Microsoft Windows GDI+ Record Type Code Execution (MS12-034; CVE-2012-0165)

A remote code execution vulnerability has been reported in Microsoft GDI+...

Microsoft Windows XP/Vista/2003 - Metafile Escape() SetAbortProc Code Execution (MS06-001) (Metasploit)

$Id: ms06001wmfsetabortproc.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Windows XP/2003/Vista Metafile Escape() SetAbortProc Code Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Windows...

Memory corruption

GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Memory Corruption Vulnerability."...

Vulnerabilities in GDI Could Allow Remote Code Execution (956802)

This host is missing a critical security update according to Microsoft Bulletin MS08-071. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS Windows GDI+ Proof of Concept (MS08-052) #2

No description provided by source. ------------------------------------------------------------------------------------------------------------ Operating System: XP SP2 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers GIF Template Reference:...

Microsoft Windows - GDI+ (PoC) (MS08-052) (2)

------------------------------------------------------------------------------------------------------------ Operating System: XP SP2 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers GIF Template Reference: http://www.sweetscape.com/010editor/templates/files/GIFTemplate.bt PoC...

MS Windows GDI+ Proof of Concept (MS08-052) #2

Exploit for unknown platform in category dos / poc ============================================== MS Windows GDI+ Proof of Concept MS08-052 2 ============================================== ------------------------------------------------------------------------------------------------------------...

MS Internet Explorer GDI+ Proof of Concept (MS08-0520)

No description provided by source. html head STYLE ef: behavior: urldefaultVML; /STYLE /head body pre ================================================ MS08-052: GDI+ Vulnerability ------------------------------------------------ Operating System: XP SP2 Internet Explorer Version: 6.0.2900.2180...

Microsoft Internet Explorer - GDI+ (PoC) (MS08-052)

ef: behavior: urldefaultVML; ================================================ MS08-052: GDI+ Vulnerability ------------------------------------------------ Operating System: XP SP2 Internet Explorer Version: 6.0.2900.2180 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers Link:...

Microsoft GDI+ BMP Integer Overflow Vulnerability

Description Microsoft GDI+ is prone to an integer-overflow vulnerability. An attacker can exploit this issue by enticing unsuspecting users to view a malicious BMP file. Successfully exploiting this issue allows remote attackers to corrupt memory and execute arbitrary code in the context of the...

Microsoft Security Bulletin MS07-046 - Critical Vulnerability in GDI Could Allow Remote Code Execution (938829)

Microsoft Security Bulletin MS07-046 - Critical Vulnerability in GDI Could Allow Remote Code Execution 938829 Published: August 14, 2007 Version: 1.0 General Information Executive Summary This critical security update resolves a privately reported vulnerability. A remote code execution...

Windows GDI+ libraries JPEG buffer overflow

Buffer overflow in JPEG parsing routines...

Microsoft Windows - JPEG GDI+ Bind/Reverse/Admin/File Download

/ Exploit Name: ============= JpegOfDeath.M.c v0.6.a All in one Bind/Reverse/Admin/FileDownload ============= Tweaked Exploit By M4Z3R For GSO All Credits & Greetings Go To: ========== FoToZ, Nick DeBaggis, MicroSoft, Anthony Rocha, romhack Peter Winter-Smith, IsolationX, YpCat, Aria Giovanni, Ni...

MS Windows JPEG GDI+ Overflow Download Shellcode Expl (MS04-028)

Exploit for unknown platform in category remote exploits =================================================================== MS Windows JPEG GDI+ Overflow Download Shellcode Exploit MS04-028 =================================================================== /...

US-CERT Technical Cyber Security Alert TA04-260A -- Microsoft Windows JPEG component buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Technical Cyber Security Alert TA04-260A Microsoft Windows JPEG component buffer overflow Original release date: September 16, 2004 Last revised: -- Source: US-CERT Systems Affected This vulnerability affects the following Microsoft Windows operating...

Microsoft Windows XP/2000 - GDI Denial of Service

source: https://www.securityfocus.com/bid/3481/info The Windows Graphics Device Interface GDI is a set of Application Programming Interfaces APIs used to display graphical output. A vulnerability exists which causes the GDI to invoke a Kernel Mode Exception due to a memory access error. This acti...

Microsoft Windows XP2000 - GDI Denial of Service

Microsoft Windows XP2000 - GDI Denial of Service source: https://www.securityfocus.com/bid/3481/info The Windows Graphics Device Interface GDI is a set of Application Programming Interfaces APIs used to display graphical output. A vulnerability exists which causes the GDI to invoke a Kernel Mode...