2183 matches found
Microsoft GDI+ TIFF Buffer Overflow (MS09-062; CVE-2009-2502)
The Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on the video display and on the printer. A remote code execution vulnerability has been discovered in the way that GDI+ allocates memory. The vulnerability is due to an error when GDI+ fail...
Microsoft GDI+ CCITT G4 TIFF File Processing Memory Corruption Remote Code Execution Vulnerability
Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly processes TIFF image files. This issue occurs when CCITT G4 compressed TIFF images are decompressed. An attacker could exploit this issue to execute arbitrary code with...
Microsoft GDI+ .NET Framework Remote Code Execution Vulnerability
Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library within the .NET framework fails to properly handle certain API calls. Successful exploits can allow an attacker to execute arbitrary code with the privileges of the currently...
Microsoft GDI+ Office Excel Art Parsing Memory Corruption (MS09-062; CVE-2009-2528)
Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been discovered in the way that GDI+ parses Microsoft Office Art in Excel files.The vulnerability is due to an error in the code responsible for parsing Office Art Property Tables that allows an attack...
MS09-062: Description of the security update for GDI+ for Microsoft Platform SDK Redistributable: October 13, 2009
Resolves vulnerabilities in Windows GDI+ Platform SDK Redistributable that could allow remote code execution if a user viewed a specially crafted image file using affected software or browsed a Web site that contains specially crafted content.INTRODUCTIONMicrosoft has released security bulletin...
Microsoft GDI+ WMF File Processing Remote Code Execution Vulnerability
Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly processes WMF image files. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts m...
Preemptive Protection against Microsoft GDI+ PNG Integer Overflow Vulnerability (MS09-062)
A remote code execution vulnerability has been discovered in the way that GDI+ allocates memory. The Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on the video display and on the printer. A remote attacker may trigger this issue via a...
Microsoft GDI+ Malformed Office BMP File Integer Overflow Remote Code Execution Vulnerability
Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly processes BMP files in Microsoft Office documents. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user...
Microsoft GDI+ PNG File Processing Remote Code Execution Vulnerability
Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly processes PNG image files. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts m...
Microsoft GDI+ Malformed Office Object Memory Corruption Remote Code Execution Vulnerability
Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly processes Microsoft Office objects. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit...
Windows GDI Privilege Elevation
Added: 05/25/2009 CVE: CVE-2006-5758 BID: 20940 OSVDB: 30214 Background The Graphics Rendering Engine in Microsoft Windows 2000 and Windows XP maps GDI Kernel structures on a global shared memory section that is created with insecure permissions. Problem Users with local access can remap the shar...
Windows GDI Privilege Elevation
Added: 05/25/2009 CVE: CVE-2006-5758 BID: 20940 OSVDB: 30214 Background The Graphics Rendering Engine in Microsoft Windows 2000 and Windows XP maps GDI Kernel structures on a global shared memory section that is created with insecure permissions. Problem Users with local access can remap the shar...
Windows GDI Privilege Elevation
Added: 05/25/2009 CVE: CVE-2006-5758 BID: 20940 OSVDB: 30214 Background The Graphics Rendering Engine in Microsoft Windows 2000 and Windows XP maps GDI Kernel structures on a global shared memory section that is created with insecure permissions. Problem Users with local access can remap the shar...
Windows GDI Privilege Elevation
Added: 05/25/2009 CVE: CVE-2006-5758 BID: 20940 OSVDB: 30214 Background The Graphics Rendering Engine in Microsoft Windows 2000 and Windows XP maps GDI Kernel structures on a global shared memory section that is created with insecure permissions. Problem Users with local access can remap the shar...
WINDOWS 7 RC 7100 GDI驱动Win32k.sys内核D.O.S漏洞
Win32k.sys是WINDOWS的GDI驱动程序，包含大量复杂的图形界面处理，由于其中大量代码是从WIN3.1中修改过来，因此成了WINDOWS漏洞多发之地。 这个漏洞主要是因为Windows 7 在其NtUserGetDc/NtUserGetDcEx函数中（也许不仅仅是这两个函数）不正确地使用了共享临界锁，导致了任何权限下的GDI程序可以引发内核BSOD，从而进行DOS攻击. =============== 在WINDOWS VISTA中，在这两个函数进入前，会调用UserEnterUserCirtSec，进入临界区，同时会将gptiCurrent设置为当前线程的WIN32THRE...
Microsoft GDIPlus PNG Infinite Loop Vulnerability
This host is running Windows XP Operating System with GDI libraries installed which is prone to Infinite Loop vulnerability. OpenVAS Vulnerability Test $Id: gbmsgdipluspnginfiniteloopvuln.nasl 7293 2017-09-27 08:49:48Z cfischer $ Microsoft GDIPlus PNG Infinite Loop Vulnerability Authors: Sujit...
Design/Logic Flaw
GDI+ in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service infinite loop via a PNG file that contains a certain large btChunkLen value...
CVE-2009-1511
GDI+ in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service infinite loop via a PNG file that contains a certain large btChunkLen value...
CVE-2009-1511
This entry concerns CVE-2009-1511: a vulnerability in Microsoft GDI+ PNG parsing on Windows XP SP3 . The issue arises when processing a PNG image containing a specific large btChunkLen value, which can trigger an infinite loop in GDI+ and lead to a remote denial of service . The affected componen...
