2558 matches found
CVE-2008-3465
Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows context-dependent attackers to cause a denial of service or execute arbitrary code via a WMF file with a malformed file-size parameter,...
CVE-2008-2249
Integer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via a malformed header in a crafted WMF file, which triggers a buffer overflow, aka "GDI Integer Overflow...
CVE-2008-3465
A heap-based buffer overflow exists in the GDI API of Microsoft Windows (versions 2000 SP4, XP SP2/SP3, Server 2003 SP1/SP2, Vista Gold/SP1, and Server 2008). The vulnerability is triggered when a third-party application uses a specific Microsoft API to copy a WMF image file containing a malforme...
CVE-2008-2249
An integer overflow in the GDI (Graphics Device Interface) allows remote code execution on various Microsoft Windows versions, including Windows 2000 SP4 , XP SP2/SP3 , Server 2003 SP1/SP2 , Vista Gold/SP1 , and Server 2008 . The vulnerability occurs because GDI improperly handles integer calcula...
iDefense Security Advisory 12.09.08: Microsoft Windows Graphics Device Interface Integer Overflow Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 12.09.08 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 09, 2008 I. BACKGROUND Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on both the video display and...
Microsoft Security Bulletin MS08-071 – Critical Vulnerabilities in GDI Could Allow Remote Code Execution (956802)
Microsoft Security Bulletin MS08-071 – Critical Vulnerabilities in GDI Could Allow Remote Code Execution 956802 Published: December 9, 2008 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in GDI. Exploitation of either of the...
CVE-2008-2249: Undefined Security Weakness
Integer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via a malformed header in a crafted WMF file, which triggers a buffer overflow, aka "GDI Integer Overflow...
Microsoft GDI+ WMF图像文件缓冲区溢出漏洞(MS08-052)
微软的GDI +缓冲区溢出漏洞，因为矢量图形链接库不当分配内存时解析WMF图像文件。 成功地利用此问题将允许攻击者腐败的记忆和执行任意代码在当前登录的用户。 Research In Motion Blackberry Unite! 1.0.1 bundle 36 Research In Motion Blackberry Unite! 1.0.1 Research In Motion Blackberry Unite! 1.0 Research In Motion Blackberry Professional Software 4.1.4 Research In Motion...
Vulnerabilities in GDI Could Allow Remote Code Execution (956802)
This host is missing a critical security update according to Microsoft Bulletin MS08-071. OpenVAS Vulnerability Test $Id: secpodms08-071.nasl 5934 2017-04-11 12:28:28Z antu123 $ Vulnerabilities in GDI Could Allow Remote Code Execution 956802 Authors: Chandan S Updated By: Madhuri D on 2010-12-07 ...
CVE-2008-3465: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows context-dependent attackers to cause a denial of service or execute arbitrary code via a WMF file with a malformed file-size parameter,...
MS08-071: Vulnerabilities in GDI+ Could Allow Remote Code Execution (956802)
The remote host is running a version of Windows that is affected by multiple buffer oveflow vulnerabilities when viewing WMF files, that could allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to send a malformed WMF file to a user on the...
PT-2008-4864 · Microsoft · Windows Xp +5
Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000 SP4 through 2000 SP4, XP SP2 through XP SP3, Server 2003 SP1 through Server 2003 SP2, Vista Gold through Vista SP1, and Server 2008 Description: A heap-based buffer overflow in the GDI API allows...
Vulnerabilities in GDI Could Allow Remote Code Execution (956802)
This host is missing a critical security update according to Microsoft Bulletin MS08-071. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows GDI library multiple security vulnerabilities
Buffer overflow and integer overflow on WMF parsing...
Workaround for Microsoft GDI WMF Heap Overflow Vulnerability (MS08-071)
A remote code execution vulnerability has been discovered in the way GDI handles file size parameters in WMF files. The Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on the video display and on the printer. A remote attacker may trigger th...
Microsoft Windows GDI WMF File HeaderSize Buffer Overflow (MS08-071; CVE-2008-2249)
The Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on the video display and on the printer. A remote code execution vulnerability has been discovered in the way GDI handles integer calculations. The vulnerability is due to a buffer overflow...
Microsoft Windows GDI File Size Parameter Heap Overflow Vulnerability
Description The GDI component of Microsoft Windows is prone to a heap-overflow vulnerability that may be triggered by a malicious WMF Windows Metafile image. A successful exploit will let the attacker execute arbitrary code in the context of the currently logged-in user. Technologies Affected HP...
Microsoft Windows GDI WMF Integer Overflow Vulnerability
Description The GDI component of Microsoft Windows is prone to an integer-overflow vulnerability that may be triggered by a malicious WMF Windows Metafile image. A successful exploit will let the attacker execute arbitrary code in the context of the currently logged-in user. Technologies Affected...
MS Windows GDI+ Proof of Concept (MS08-052) #2
No description provided by source. ------------------------------------------------------------------------------------------------------------ Operating System: XP SP2 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers GIF Template Reference:...
MS Windows GDI+ Proof of Concept (MS08-052) #2
Exploit for unknown platform in category dos / poc ============================================== MS Windows GDI+ Proof of Concept MS08-052 2 ============================================== ------------------------------------------------------------------------------------------------------------...