Microsoft Windows GDI的内核本地特权升级漏洞

Microsoft Windows容易局部特权升级,因为数据结构漏洞的GDI绘制的内核可以重新部署为读写其他进程.入侵者可能利用此问题来执行任意机器代码与系统级特权.成功可能造成影响的计算机的完全妥协.失败可能导致拒绝服务. Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microsoft Windows XP Professional x64 Edition Microsoft...

Windows kernel GDI structures privilege escalation

It's possible to remap read-only share memory section in write mode...

Microsoft Windows GDI WMF处理堆溢出漏洞（MS06-026）

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的图形渲染引擎处理Windows元文件（WMF）图形的方式存在堆溢出漏洞，成功利用这个漏洞的攻击者可以完全控制受影响系统。 攻击者可以通过创建特制的WMF图形来利用这个漏洞，如果用户访问了Web站点或特制邮件消息的话就会导致执行任意指令。 Microsoft Windows ME Microsoft Windows 98se Microsoft Windows 98 MS06-026：Vulnerability in Graphics Rendering Engine Could All...

CVE-2006-4071

Sign extension vulnerability in the createBrushIndirect function in the GDI library gdi32.dll in Microsoft Windows XP, Server 2003, and possibly other versions, allows user-assisted attackers to cause a denial of service application crash via a crafted WMF file...

CVE-2006-4071

Sign extension vulnerability in the createBrushIndirect function in the GDI library gdi32.dll in Microsoft Windows XP, Server 2003, and possibly other versions, allows user-assisted attackers to cause a denial of service application crash via a crafted WMF file...

CVE-2006-4071

CVE-2006-4071 affects Microsoft Windows XP and Windows Server 2003 (gdi32.dll). Vulnerable component: createBrushIndirect in GDI; root cause: sign extension issue that allows a crafted WMF file to crash the application (user-assisted DoS). Impact: denial of service via crash. Exploitation details...

Microsoft Windows XP/2000/2003 - Graphical Device Interface Plus Library Denial of Service

source: https://www.securityfocus.com/bid/19221/info Reportedly, the Microsoft Windows GDI+ library 'gdiplus.dll' is prone to a denial-of-service vulnerability because the software fails to handle malformed image files properly. An attacker may leverage this issue to trigger a denial-of-service...

Microsoft Windows XP20002003 - Graphical Device Interface Plus Library Denial of Service

Microsoft Windows XP20002003 - Graphical Device Interface Plus Library Denial of Service source: https://www.securityfocus.com/bid/19221/info Reportedly, the Microsoft Windows GDI+ library 'gdiplus.dll' is prone to a denial-of-service vulnerability because the software fails to handle malformed...

Microsoft Windows GDI WMF Handling Heap Overflow Vulnerability

Description The Microsoft Windows GDI Graphics Rendering Engine is prone to a heap-overflow vulnerability. This issue is exposed when the component loads a specially crafted WMF Windows Metafile image. If this issue is exploited, a malicious WMF or EMF file could potentially corrupt heap-based...

[SECURITY] [DSA 954-1] New wine packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 954-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 25th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 954-1] New wine packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 954-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 25th, 2006 http://www.debian.org/security/faq -...

DSA-954-1 wine - design flaw

Bulletin has no description...

GLSA-200601-09 : Wine: Windows Metafile SETABORTPROC vulnerability

The remote host is affected by the vulnerability described in GLSA-200601-09 Wine: Windows Metafile SETABORTPROC vulnerability H D Moore discovered that Wine implements the insecure-by-design SETABORTPROC GDI Escape function for Windows Metafile WMF files. Impact : An attacker could entice a user...

Wine: Windows Metafile SETABORTPROC vulnerability

Background Wine is a free implementation of Windows APIs for Unix-like systems. Description H D Moore discovered that Wine implements the insecure-by-design SETABORTPROC GDI Escape function for Windows Metafile WMF files. Impact An attacker could entice a user to open a specially crafted Windows...

Code injection

gdi/driver.c and gdi/printdrv.c in Wine 20050930, and other versions, implement the SETABORTPROC GDI Escape function call for Windows Metafile WMF files, which allows attackers to execute arbitrary code, the same vulnerability as CVE-2005-4560 but in a different codebase...

CVE-2006-0106

gdi/driver.c and gdi/printdrv.c in Wine 20050930, and other versions, implement the SETABORTPROC GDI Escape function call for Windows Metafile WMF files, which allows attackers to execute arbitrary code, the same vulnerability as CVE-2005-4560 but in a different codebase...

CVE-2006-0106

gdi/driver.c and gdi/printdrv.c in Wine 20050930, and other versions, implement the SETABORTPROC GDI Escape function call for Windows Metafile WMF files, which allows attackers to execute arbitrary code, the same vulnerability as CVE-2005-4560 but in a different codebase...

CVE-2006-0106

gdi/driver.c and gdi/printdrv.c in Wine 20050930, and other versions, implement the SETABORTPROC GDI Escape function call for Windows Metafile WMF files, which allows attackers to execute arbitrary code, the same vulnerability as CVE-2005-4560 but in a different codebase...

CVE-2006-0106

gdi/driver.c and gdi/printdrv.c in Wine 20050930, and other versions, implement the SETABORTPROC GDI Escape function call for Windows Metafile WMF files, which allows attackers to execute arbitrary code, the same vulnerability as CVE-2005-4560 but in a different codebase...

CVE-2006-0106

gdi/driver.c and gdi/printdrv.c in Wine 20050930, and other versions, implement the SETABORTPROC GDI Escape function call for Windows Metafile WMF files, which allows attackers to execute arbitrary code, the same vulnerability as CVE-2005-4560 but in a different codebase...