2558 matches found
Microsoft GDI+ EMF Image Processing Memory Corruption Vulnerability
Description Microsoft GDI+ is prone to a remote memory-corruption vulnerability that occurs when an application that uses the library tries to process a specially crafted EMF Enhanced Metafile image file. Successfully exploiting this issue would allow an attacker to execute arbitrary code in the...
Microsoft Windows GDI+ GIF Parsing Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows XP, Server and Vista. User interaction is required in that a user must open a malicious image file or browse to a malicious website. The specific flaws exist in the GDI+ subsystem...
Microsoft GDI+ VML Heap-Based Buffer Overflow Vulnerability
Description Microsoft GDI+ is prone to a heap-based buffer-overflow vulnerability because the vector graphics link library improperly processes gradient sizes. Successfully exploiting this issue would allow an attacker to corrupt heap memory and execute arbitrary code in the context of the...
Microsoft Windows GDI+ GIF Parsing Buffer Overflow (MS08-052; CVE-2008-3013)
Graphics Interchange Format GIF images are 8-bit files that support transparency, compression, interlacing, and multiple-image pictures animated GIFs. A remote code execution vulnerability has been discovered in the way GDI+ parses GIF images. The vulnerability is due to a buffer overrun when GDI...
Microsoft Windows GDI+ VML Gradient Buffer Overflow (MS08-052; CVE-2007-5348)
Vector Markup Language VML is a set of XML tags used for exchange, editing, and delivery of vector graphics on the web. A remote code execution vulnerability has been reported in the way that GDI+ handles VML files. The vulnerability is due to a heap-based buffer overrun when GDI+ fails to proper...
Micrsoft Windows GDI (CreateDIBPatternBrushPt) Heap Overflow PoC
No description provided by source. CreateDIBPatternBrushPt Heap Overflow DOS By Ac!dDrop This was tested on Windows XP Sp2 GDI32.dll 5.1.2600.3099 Internet explorer 6.0.2900.2180 ------ Causes Explorer.exe to crash. and causes Internet explorer to close silently...
Microsoft Windows - GDI (CreateDIBPatternBrushPt) Heap Overflow (PoC)
Microsoft Windows - GDI CreateDIBPatternBrushPt Heap Overflow PoC CreateDIBPatternBrushPt Heap Overflow DOS By Ac!dDrop This was tested on Windows XP Sp2 GDI32.dll 5.1.2600.3099 Internet explorer 6.0.2900.2180 ------ Causes Explorer.exe to crash. and causes Internet explorer to close silently...
Micrsoft Windows GDI (CreateDIBPatternBrushPt) Heap Overflow PoC
Exploit for unknown platform in category dos / poc ================================================================ Micrsoft Windows GDI CreateDIBPatternBrushPt Heap Overflow PoC ================================================================ CreateDIBPatternBrushPt Heap Overflow DOS By Ac!dDrop...
Microsoft Windows - GDI (CreateDIBPatternBrushPt) Heap Overflow (PoC)
CreateDIBPatternBrushPt Heap Overflow DOS By Ac!dDrop This was tested on Windows XP Sp2 GDI32.dll 5.1.2600.3099 Internet explorer 6.0.2900.2180 ------ Causes Explorer.exe to crash. and causes Internet explorer to close silently. ------ This is work in progress , i am still trying to make it run...
MS Windows JPEG GDI+ Overflow Shellcoded Exploit
No description provided by source. // launch a local cmd.exe not bound to the net... // GDI+ buffer overrun exploit by FoToZ // NB: the headers here are only sample headers taken from a .JPG file, // with the FF FE 00 01 inserted in header1. // Sample shellcode is provided // You can put approx...
MS Windows JPEG GDI+ All-In-One Bind/Reverse/Admin/FileDownload
No description provided by source. / Exploit Name: ============= JpegOfDeath.M.c v0.6.a All in one Bind/Reverse/Admin/FileDownload ============= Tweaked Exploit By M4Z3R For GSO All Credits & Greetings Go To: ========== FoToZ, Nick DeBaggis, MicroSoft, Anthony Rocha, romhack Peter Winter-Smith,...
MS Windows JPEG GDI+ Overflow Administrator Exploit (MS04-028)
No description provided by source. !/bin/sh MS04-028 Exploit PoC II with Shellcode: CreateUser X in Administrators Group Tested on: WinXP Professional English SP1 - GDIPLUS.DLL version 5.1.3097.0 WinXP Professional Italian SP1 - GDIPLUS.DLL version 5.1.3101.0 SP2 is not vulnerable, don't waste yo...
MS Windows JPEG GDI+ Remote Heap Overflow Exploit (MS04-028)
No description provided by source. / GDI+ JPEG Remote Exploit By John Bissell A.K.A. HighT1mes Exploit Name: ============= JpegOfDeath.c v0.5 Date Exploit Released: ====================== Sep, 23, 2004 Description: ============ Exploit based on FoToZ exploit but kicks the exploit up a notch by...
CVE-2008-2160: Improper Control of Generation of Code
Multiple unspecified vulnerabilities in the JPEG GDI+ and GIF image processing in Microsoft Windows CE 5.0 allow remote attackers to execute arbitrary code via crafted 1 JPEG and 2 GIF images...
MS Windows GDI Image Parsing Stack Overflow Exploit (MS08-021)
No description provided by source. ///////////////////////////////////////////////////////////// ///Exploit the MS08-021 : Stack Overflow on GDI API ///Author: Lamhtz ///Date: April 14th, 2008 ///Usage: appname.exe filename ///Function: Generate a crafted emf file which could /// automatically ru...
MS Windows GDI Image Parsing Stack Overflow Exploit (MS08-021)
Exploit for unknown platform in category local exploits ============================================================== MS Windows GDI Image Parsing Stack Overflow Exploit MS08-021 ==============================================================...
Microsoft Windows - GDI Image Parsing Stack Overflow (MS08-021)
Microsoft Windows - GDI Image Parsing Stack Overflow MS08-021 ///////////////////////////////////////////////////////////// ///Exploit the MS08-021 : Stack Overflow on GDI API ///Author: Lamhtz ///Date: April 14th, 2008 ///Usage: filename ///Function: Generate a crafted emf file which could ///...
Microsoft Windows - GDI Image Parsing Stack Overflow (MS08-021)
///////////////////////////////////////////////////////////// ///Exploit the MS08-021 : Stack Overflow on GDI API ///Author: Lamhtz ///Date: April 14th, 2008 ///Usage: filename ///Function: Generate a crafted emf file which could /// automatically run calc.exe in Win2kSP4 CHS Version /// with...
Microsoft GDI buffer overflow vulnerability
Overview The Microsoft GDI contains a buffer overflow vulnerability that may allow an attacker to execute arbitrary code. Description The Graphics Device Interface GDI is component of the Microsoft Windows user interface. Windows Metafile WMF and Enhanced Metafile EMF are image file formats...
Microsoft Windows GDI文件名解析栈溢出漏洞（MS08-021）
BUGTRAQ ID: 28570 CVECAN ID: CVE-2008-1087 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的GDI函数在处理特制EMF图形文件中的文件名参数时存在栈溢出。如果用户受骗打开了特制的图形文件的话，就可能触发这个溢出，导致执行任意指令。 Microsoft Windows XP SP2 Microsoft Windows Vista SP1 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2003 SP2...