GDI+ - 'gdiplus.dll' CreateDashedPath Integer Overflow

Abysssec Research 1 Advisory information Title : GDI+ CreateDashedPath Integer overflow in gdiplus.dll Discovery : Nicolas july from vupen Analysis : Abysssec.com Vendor : http://www.microsoft.com Impact : High Contact : info at abysssec.com Twitter : @abysssec CVE : CVE-2011-0041 2 Vulnerable...

Microsoft Windows multiple security vulnerabilities

SMB client and server memory corruption, Fax Cover Page Editor memory corruption, MFC library unsafe DLL loading, MHTML library information leak, GDI+ library integer overflow, DNS client memory corruption, memory corruption in .Net Framework, memory corruption in JScript / VBScript engines, stac...

CVE-2011-0041

Integer overflow in gdiplus.dll in GDI+ in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted EMF image, aka "GDI+ Integer Overflow Vulnerability....

Integer overflow

Integer overflow in gdiplus.dll in GDI+ in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted EMF image, aka "GDI+ Integer Overflow Vulnerability....

CVE-2011-0041

Integer overflow in gdiplus.dll in GDI+ in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted EMF image, aka "GDI+ Integer Overflow Vulnerability....

CVE-2011-0041

CVE-2011-0041 affects gdiplus.dll (GDI+) across Windows XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2 and Office XP SP3. Root cause: integer overflow in gdiplus!GpPath::CreateDashedPath when processing EMF/EMF+ images, enabling remote code execution. Verified references indicat...

Microsoft GDI+ Remote Code Execution Vulnerability (2489979)

This host is missing a critical security update according to Microsoft Bulletin MS11-029. OpenVAS Vulnerability Test $Id: secpodms11-029.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft GDI+ Remote Code Execution Vulnerability 2489979 Authors: Madhuri D Copyright: Copyright c 2011 SecPod,...

VUPEN Security Research - Microsoft Windows GDI+ Size Handling Integer Overflow Vulnerability

VUPEN Security Research - Microsoft Windows GDI+ Size Handling Integer Overflow Vulnerability http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Microsoft Windows is a series of software operating systems and graphical user interfaces produced by Microsoft. Windows had...

VUPEN Security Research - Microsoft Windows GDI+ Size Handling Integer Overflow Vulnerability

VUPEN Security Research - Microsoft Windows GDI+ Size Handling Integer Overflow Vulnerability http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Microsoft Windows is a series of software operating systems and graphical user interfaces produced by Microsoft. Windows had...

MS11-029: Vulnerability in GDI+ Could Allow Remote Code Execution (2489979)

The version of Microsoft's GDI+ subsystem installed on the remote Windows host contains an integer overflow due to the way that GDI+ handles integer calculations. If an attacker can trick a user on the affected system into opening a specially crafted EMF image file, this issue could be exploited ...

Microsoft GDI+ Remote Code Execution Vulnerability (2489979)

This host is missing a critical security update according to Microsoft Bulletin MS11-029. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft GDI+ EMF Image Processing Integer Overflow (MS11-029; CVE-2011-0041)

GDI+ is a graphics device interface that provides two-dimensional vector graphics, imaging, and typography to applications and programmers. An integer overflow vulnerability has been discovered in the way that GDI+ handles integer calculations. The vulnerability is caused by a memory corruption...

MS11-029: Vulnerability in GDI+ could allow remote code execution: April 12, 2011

Resolves a vulnerability in Microsoft Windows GDI+ that could allow remote code execution if a user viewed a specially crafted image file by using affected software or browsed a website that contains specially crafted content.Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To...

Microsoft GDI+ EMF Image Processing Integer Overflow Memory Corruption Vulnerability

Description Microsoft GDI+ is prone to a remote memory-corruption vulnerability that occurs when an application that uses the library tries to process a specially crafted Enhanced Metafile EMF image file. An attacker can exploit this issue to execute arbitrary code with the privileges of the...

Microsoft Products GDI Plus Remote Code Execution Vulnerabilities (954593)

This host is missing a critical security update according to Microsoft Bulletin MS08-052. OpenVAS Vulnerability Test $Id: gbms08-052.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft GDI Plus Remote Code Execution Vulnerabilities 954593 Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Networ...

Microsoft Products GDI Plus Remote Code Execution Vulnerabilities (954593)

This host is missing a critical security update according to Microsoft Bulletin MS08-052. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Vulnerabilities in GDI Could Allow Remote Code Execution (925902)

This host is missing a critical security update according to Microsoft Bulletin MS07-017. OpenVAS Vulnerability Test $Id: gbms07-017.nasl 5362 2017-02-20 12:46:39Z cfi $ Vulnerabilities in GDI Could Allow Remote Code Execution 925902 Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Networ...

Vulnerabilities in GDI Could Allow Remote Code Execution (925902)

This host is missing a critical security update according to Microsoft Bulletin MS07-017. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora Update for libgdiplus FEDORA-2010-13676

Check for the Version of libgdiplus OpenVAS Vulnerability Test Fedora Update for libgdiplus FEDORA-2010-13676 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Microsoft Windows XP/Vista/2003 - Metafile Escape() SetAbortProc Code Execution (MS06-001) (Metasploit)

$Id: ms06001wmfsetabortproc.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...