Microsoft Products GDI Plus Remote Code Execution Vulnerabilities (954593)

This host is missing a critical security update according to Microsoft Bulletin MS08-052. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Vulnerabilities in GDI Could Allow Remote Code Execution (925902)

This host is missing a critical security update according to Microsoft Bulletin MS07-017. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Vulnerabilities in GDI Could Allow Remote Code Execution (925902)

This host is missing a critical security update according to Microsoft Bulletin MS07-017. OpenVAS Vulnerability Test $Id: gbms07-017.nasl 5362 2017-02-20 12:46:39Z cfi $ Vulnerabilities in GDI Could Allow Remote Code Execution 925902 Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Networ...

Fedora Update for libgdiplus FEDORA-2010-13676

Check for the Version of libgdiplus OpenVAS Vulnerability Test Fedora Update for libgdiplus FEDORA-2010-13676 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Microsoft Windows XP/Vista/2003 - Metafile Escape() SetAbortProc Code Execution (MS06-001) (Metasploit)

$Id: ms06001wmfsetabortproc.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Fedora Update for libgdiplus FEDORA-2010-13695

Check for the Version of libgdiplus OpenVAS Vulnerability Test Fedora Update for libgdiplus FEDORA-2010-13695 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

[SECURITY] Fedora 14 Update: libgdiplus-2.6.7-3.fc14

An Open Source implementation of the GDI+ API, it is part of the Mono Project...

[SECURITY] Fedora 13 Update: libgdiplus-2.6.7-2.fc13

An Open Source implementation of the GDI+ API, it is part of the Mono Project...

[SECURITY] Fedora 12 Update: libgdiplus-2.4.2-4.fc12

An implementation of the GDI+ API, built on top of Cairo...

Fedora Update for libgdiplus FEDORA-2010-10332

Check for the Version of libgdiplus OpenVAS Vulnerability Test Fedora Update for libgdiplus FEDORA-2010-10332 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

[SECURITY] Fedora 13 Update: libgdiplus-2.6.4-1.fc13

An Open Source implementation of the GDI+ API, it is part of the Mono Project...

MS10-043: Vulnerability in Canonical Display Driver Could Allow Remote Code Execution (2032276)

A flaw exists in the way the Microsoft Canonical Display Driver cdd.dll parses information copied from user mode to kernel mode. If the Windows Aero theme is enabled, an attacker who tricks a user on the affected host into viewing a specially crafted image using an application that uses the APIs...

Microsoft Windows GDI Multiple Vulnerabilities (925902)

Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service persistent reboot via a large length value in the second or later anih block of a RIFF .ANI, cur, or .ico file, which...

Microsoft Windows GDI Multiple Vulnerabilities (925902)

Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service persistent reboot via a large length value in the second or later anih block of a RIFF .ANI, cur, or .ico file, which...

Microsoft Windows Canonical Display Driver Denial Of Service (CVE-2009-3678)

The Canonical Display Driver cdd.dll is used by desktop composition to blend GDI and DirectX drawing. CDD emulates the interface of a Windows XP display driver for interactions with the Win32k GDI graphics engine. A remote code execution vulnerability has been reported in Microsoft Windows...

Microsoft Windows WMF Handling Arbitrary Code Execution (CVE-2005-4560)

There exists a code execution vulnerability in Microsoft Windows. The vulnerability is created by unrestricted access to GDI functions through WMF files. An attacker can exploit this vulnerability to supply and execute arbitrary code through calling a specific GDI function via a crafted WMF file...

Microsoft Windows GDI+ PNG Processing Integer Overflow (MS09-062; CVE-2009-3126)

The Windows Graphics Rendering Engine is implemented via the Graphics Device Interface GDI subsystem. GDI is a Microsoft standard for representing graphical objects and outputting these representations to devices such as monitors and printers. GDI is capable of representing vector graphics, drawi...

Windows XP/2003/Vista Metafile Escape() SetAbortProc Code Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Windows...

Input validation

The Graphics Device Interface GDI in win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, a...

CVE-2009-2513

The Graphics Device Interface GDI in win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, a...