2268 matches found
Microsoft Windows GDI+ BMP File Parsing Integer Overflow (MS08-052; CVE-2004-0904; CVE-2008-3015)
Bitmap BMP is an image file format used to store bitmap digital images. A remote code execution vulnerability has been discovered in the way GDI+ handles integer calculations for BMP files. The vulnerability is due to a buffer overflow when GDI+ fails to properly processes a malformed header in a...
Microsoft GDI+ WMF Image File Buffer Overflow Vulnerability
Description Microsoft GDI+ is prone to a buffer-overflow vulnerability because the vector graphics linked library improperly allocates memory when parsing WMF image files. Successfully exploiting this issue would allow an attacker to corrupt memory and execute arbitrary code in the context of the...
Microsoft GDI+ GIF File Parsing Remote Code Execution Vulnerability
Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly parses GIF image files. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts may...
Microsoft GDI+ EMF Image Processing Memory Corruption Vulnerability
Description Microsoft GDI+ is prone to a remote memory-corruption vulnerability that occurs when an application that uses the library tries to process a specially crafted EMF Enhanced Metafile image file. Successfully exploiting this issue would allow an attacker to execute arbitrary code in the...
Microsoft Windows GDI+ GIF Parsing Buffer Overflow (MS08-052; CVE-2008-3013)
Graphics Interchange Format GIF images are 8-bit files that support transparency, compression, interlacing, and multiple-image pictures animated GIFs. A remote code execution vulnerability has been discovered in the way GDI+ parses GIF images. The vulnerability is due to a buffer overrun when GDI...
Microsoft Windows GDI+ VML Gradient Buffer Overflow (MS08-052; CVE-2007-5348)
Vector Markup Language VML is a set of XML tags used for exchange, editing, and delivery of vector graphics on the web. A remote code execution vulnerability has been reported in the way that GDI+ handles VML files. The vulnerability is due to a heap-based buffer overrun when GDI+ fails to proper...
Micrsoft Windows GDI (CreateDIBPatternBrushPt) Heap Overflow PoC
No description provided by source. CreateDIBPatternBrushPt Heap Overflow DOS By Ac!dDrop This was tested on Windows XP Sp2 GDI32.dll 5.1.2600.3099 Internet explorer 6.0.2900.2180 ------ Causes Explorer.exe to crash. and causes Internet explorer to close silently...
Microsoft Windows - GDI (CreateDIBPatternBrushPt) Heap Overflow (PoC)
CreateDIBPatternBrushPt Heap Overflow DOS By Ac!dDrop This was tested on Windows XP Sp2 GDI32.dll 5.1.2600.3099 Internet explorer 6.0.2900.2180 ------ Causes Explorer.exe to crash. and causes Internet explorer to close silently. ------ This is work in progress , i am still trying to make it run...
Micrsoft Windows GDI (CreateDIBPatternBrushPt) Heap Overflow PoC
Exploit for unknown platform in category dos / poc ================================================================ Micrsoft Windows GDI CreateDIBPatternBrushPt Heap Overflow PoC ================================================================ CreateDIBPatternBrushPt Heap Overflow DOS By Ac!dDrop...
Microsoft Windows - GDI (CreateDIBPatternBrushPt) Heap Overflow (PoC)
Microsoft Windows - GDI CreateDIBPatternBrushPt Heap Overflow PoC CreateDIBPatternBrushPt Heap Overflow DOS By Ac!dDrop This was tested on Windows XP Sp2 GDI32.dll 5.1.2600.3099 Internet explorer 6.0.2900.2180 ------ Causes Explorer.exe to crash. and causes Internet explorer to close silently...
MS Windows JPEG GDI+ All-In-One Bind/Reverse/Admin/FileDownload
No description provided by source. / Exploit Name: ============= JpegOfDeath.M.c v0.6.a All in one Bind/Reverse/Admin/FileDownload ============= Tweaked Exploit By M4Z3R For GSO All Credits & Greetings Go To: ========== FoToZ, Nick DeBaggis, MicroSoft, Anthony Rocha, romhack Peter Winter-Smith,...
MS Windows JPEG GDI+ Overflow Shellcoded Exploit
No description provided by source. // launch a local cmd.exe not bound to the net... // GDI+ buffer overrun exploit by FoToZ // NB: the headers here are only sample headers taken from a .JPG file, // with the FF FE 00 01 inserted in header1. // Sample shellcode is provided // You can put approx...
MS Windows JPEG GDI+ Remote Heap Overflow Exploit (MS04-028)
No description provided by source. / GDI+ JPEG Remote Exploit By John Bissell A.K.A. HighT1mes Exploit Name: ============= JpegOfDeath.c v0.5 Date Exploit Released: ====================== Sep, 23, 2004 Description: ============ Exploit based on FoToZ exploit but kicks the exploit up a notch by...
MS Windows JPEG GDI+ Overflow Administrator Exploit (MS04-028)
No description provided by source. !/bin/sh MS04-028 Exploit PoC II with Shellcode: CreateUser X in Administrators Group Tested on: WinXP Professional English SP1 - GDIPLUS.DLL version 5.1.3097.0 WinXP Professional Italian SP1 - GDIPLUS.DLL version 5.1.3101.0 SP2 is not vulnerable, don't waste yo...
MS Windows GDI Image Parsing Stack Overflow Exploit (MS08-021)
No description provided by source. ///////////////////////////////////////////////////////////// ///Exploit the MS08-021 : Stack Overflow on GDI API ///Author: Lamhtz ///Date: April 14th, 2008 ///Usage: appname.exe filename ///Function: Generate a crafted emf file which could /// automatically ru...
Microsoft Windows - GDI Image Parsing Stack Overflow (MS08-021)
///////////////////////////////////////////////////////////// ///Exploit the MS08-021 : Stack Overflow on GDI API ///Author: Lamhtz ///Date: April 14th, 2008 ///Usage: filename ///Function: Generate a crafted emf file which could /// automatically run calc.exe in Win2kSP4 CHS Version /// with...
Microsoft Windows - GDI Image Parsing Stack Overflow (MS08-021)
Microsoft Windows - GDI Image Parsing Stack Overflow MS08-021 ///////////////////////////////////////////////////////////// ///Exploit the MS08-021 : Stack Overflow on GDI API ///Author: Lamhtz ///Date: April 14th, 2008 ///Usage: filename ///Function: Generate a crafted emf file which could ///...
MS Windows GDI Image Parsing Stack Overflow Exploit (MS08-021)
Exploit for unknown platform in category local exploits ============================================================== MS Windows GDI Image Parsing Stack Overflow Exploit MS08-021 ==============================================================...
Microsoft GDI buffer overflow vulnerability
Overview The Microsoft GDI contains a buffer overflow vulnerability that may allow an attacker to execute arbitrary code. Description The Graphics Device Interface GDI is component of the Microsoft Windows user interface. Windows Metafile WMF and Enhanced Metafile EMF are image file formats...
Microsoft Windows GDI文件名解析栈溢出漏洞（MS08-021）
BUGTRAQ ID: 28570 CVECAN ID: CVE-2008-1087 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的GDI函数在处理特制EMF图形文件中的文件名参数时存在栈溢出。如果用户受骗打开了特制的图形文件的话，就可能触发这个溢出，导致执行任意指令。 Microsoft Windows XP SP2 Microsoft Windows Vista SP1 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2003 SP2...