CVE-2008-2249

Integer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via a malformed header in a crafted WMF file, which triggers a buffer overflow, aka "GDI Integer Overflow...

Integer overflow

Integer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via a malformed header in a crafted WMF file, which triggers a buffer overflow, aka "GDI Integer Overflow...

CVE-2008-3465

Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows context-dependent attackers to cause a denial of service or execute arbitrary code via a WMF file with a malformed file-size parameter,...

CVE-2008-3465

CVE-2008-3465 describes a heap overflow in the GDI API used when processing WMF images. The vulnerability arises from parsing a malformed file-size parameter in WMF files, which could allow a remote attacker to cause a denial of service or execute arbitrary code on affected Windows variants. Affe...

CVE-2008-2249

The CVE-2008-2249 issue affects multiple Windows client/server editions (2000 SP4, XP SP2/SP3, Server 2003 SP1/SP2, Vista SP1, Server 2008) in the Windows GDI subsystem. It is caused by an integer/buffer overflow in the GDI rendering path when processing a malformed WMF header, leading to remote ...

CVE-2008-3465

Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows context-dependent attackers to cause a denial of service or execute arbitrary code via a WMF file with a malformed file-size parameter,...

CVE-2008-2249

Integer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via a malformed header in a crafted WMF file, which triggers a buffer overflow, aka "GDI Integer Overflow...

Vulnerabilities in GDI Could Allow Remote Code Execution (956802)

This host is missing a critical security update according to Microsoft Bulletin MS08-071. OpenVAS Vulnerability Test $Id: secpodms08-071.nasl 5934 2017-04-11 12:28:28Z antu123 $ Vulnerabilities in GDI Could Allow Remote Code Execution 956802 Authors: Chandan S Updated By: Madhuri D on 2010-12-07 ...

PT-2008-4864 · Microsoft · Windows Xp +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000 SP4 through 2000 SP4, XP SP2 through XP SP3, Server 2003 SP1 through Server 2003 SP2, Vista Gold through Vista SP1, and Server 2008 Description: A heap-based buffer overflow in the GDI API allows...

Microsoft GDI+ WMF图像文件缓冲区溢出漏洞(MS08-052)

微软的GDI +缓冲区溢出漏洞，因为矢量图形链接库不当分配内存时解析WMF图像文件。 成功地利用此问题将允许攻击者腐败的记忆和执行任意代码在当前登录的用户。 Research In Motion Blackberry Unite! 1.0.1 bundle 36 Research In Motion Blackberry Unite! 1.0.1 Research In Motion Blackberry Unite! 1.0 Research In Motion Blackberry Professional Software 4.1.4 Research In Motion...

Microsoft Windows GDI library multiple security vulnerabilities

Buffer overflow and integer overflow on WMF parsing...

Microsoft Security Bulletin MS08-071 – Critical Vulnerabilities in GDI Could Allow Remote Code Execution (956802)

Microsoft Security Bulletin MS08-071 – Critical Vulnerabilities in GDI Could Allow Remote Code Execution 956802 Published: December 9, 2008 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in GDI. Exploitation of either of the...

iDefense Security Advisory 12.09.08: Microsoft Windows Graphics Device Interface Integer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 12.09.08 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 09, 2008 I. BACKGROUND Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on both the video display and...

MS08-071: Vulnerabilities in GDI+ Could Allow Remote Code Execution (956802)

The remote host is running a version of Windows that is affected by multiple buffer oveflow vulnerabilities when viewing WMF files, that could allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to send a malformed WMF file to a user on the...

Vulnerabilities in GDI Could Allow Remote Code Execution (956802)

This host is missing a critical security update according to Microsoft Bulletin MS08-071. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Workaround for Microsoft GDI WMF Heap Overflow Vulnerability (MS08-071)

A remote code execution vulnerability has been discovered in the way GDI handles file size parameters in WMF files. The Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on the video display and on the printer. A remote attacker may trigger th...

Microsoft Windows GDI WMF File HeaderSize Buffer Overflow (MS08-071; CVE-2008-2249)

The Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on the video display and on the printer. A remote code execution vulnerability has been discovered in the way GDI handles integer calculations. The vulnerability is due to a buffer overflow...

Microsoft Windows GDI File Size Parameter Heap Overflow Vulnerability

Description The GDI component of Microsoft Windows is prone to a heap-overflow vulnerability that may be triggered by a malicious WMF Windows Metafile image. A successful exploit will let the attacker execute arbitrary code in the context of the currently logged-in user. Technologies Affected HP...

Microsoft Windows GDI WMF Integer Overflow Vulnerability

Description The GDI component of Microsoft Windows is prone to an integer-overflow vulnerability that may be triggered by a malicious WMF Windows Metafile image. A successful exploit will let the attacker execute arbitrary code in the context of the currently logged-in user. Technologies Affected...

MS Windows GDI+ Proof of Concept (MS08-052) #2

No description provided by source. ------------------------------------------------------------------------------------------------------------ Operating System: XP SP2 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers GIF Template Reference:...