CVE-2009-1217: Off-by-one Error

Off-by-one error in the GpFont::SetData function in gdiplus.dll in Microsoft GDI+ on Windows XP allows remote attackers to cause a denial of service stack corruption and application termination via a crafted EMF file that triggers an integer overflow, as demonstrated by voltage-exploit.emf, aka t...

MS Windows GDI+ Proof of Concept (MS08-052) #2

No description provided by source. ------------------------------------------------------------------------------------------------------------ Operating System: XP SP2 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers GIF Template Reference:...

mswingdi-poc.txt

------------------------------------------------------------------------------------------------------------ Operating System: XP SP2 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers GIF Template Reference: http://www.sweetscape.com/010editor/templates/files/GIFTemplate.bt PoC...

Microsoft Windows - GDI+ (PoC) (MS08-052) (2)

------------------------------------------------------------------------------------------------------------ Operating System: XP SP2 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers GIF Template Reference: http://www.sweetscape.com/010editor/templates/files/GIFTemplate.bt PoC...

Microsoft Windows - GDI+ (PoC) (MS08-052) (2)

Microsoft Windows - GDI+ PoC MS08-052 2 ------------------------------------------------------------------------------------------------------------ Operating System: XP SP2 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers GIF Template Reference:...

WinZip 'gdiplus.dll' Microsoft模块存在未明安全漏洞

BUGTRAQ ID:31485 CNCAN ID：CNCAN-2008100104 WinZip是一款流行的解压缩程序。 WinZip发布的11.2 SR-1版本修补一个漏洞，这个漏洞是由于有此漏洞影响的软件版本包含 "gdiplus.dll"库造成的，利用这个漏洞可允许攻击者执行任意代码。 目前没有详细漏洞细节提供。 WinZip WinZip 11.1 WinZip WinZip 11.0 WinZip WinZip 11 升级到WinZip 11.2 SR-1版本 http://update.winzip.com/wz112sr1.htm...

WinZip 11.x 'gdiplus.dll' Unspecified Vulnerability

The version of WinZip installed on the remote host is prior to 11.2 SR-1 Build 8261. It is, therefore, affected by an unspecified vulnerability since it is known to ship with an old version of the Microsoft DLL file 'gdiplus.dll'. Note that only WinZip versions 11.x on Windows 2000 systems use th...

Design/Logic Flaw

gdiplus.dll in GDI+ in Microsoft Windows XP SP3 does not properly handle crafted .ico files, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via a certain crash.ico file on a web site, and allows user-assisted attackers to cause a denial of...

CVE-2008-4327

CVE-2008-4327 concerns gdiplus.dll (GDI+) in Windows XP SP3. The vulnerability arises from improper handling of crafted ICO files, specifically crash.ico on a web site or on the desktop, causing a divide-by-zero error and a denial of service (application crash). The connected records corroborate ...

MS Internet Explorer GDI+ Proof of Concept (MS08-0 5 2)-vulnerability warning-the black bar safety net

MS Internet Explorer GDI+ Proof of Concept MS08-0 5 2 html head STYLE ef: behavior: urldefaultVML; /STYLE /head body pre ================================================ MS08-0 5 2: GDI+ Vulnerability ------------------------------------------------ Operating System: XP SP2 Internet Explorer...

CVE-2008-4327: Undefined Security Weakness

gdiplus.dll in GDI+ in Microsoft Windows XP SP3 does not properly handle crafted .ico files, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via a certain crash.ico file on a web site, and allows user-assisted attackers to cause a denial of...

MS Windows GDI+ (. ico File) Remote Division By Zero Exploit-vulnerability warning-the black bar safety net

MS Windows GDI+ . ico Remote Division By Zero Application: GDIPLUS.DLL Web Site: http://www.microsoft.com/ Platform: Windows Bug: Division By Zero Tested agains: XP SP3 fully patched Note: This have nothing to do with http://milw0rm.com/exploits/4044...

Microsoft Internet Explorer - GDI+ (PoC) (MS08-052)

Microsoft Internet Explorer - GDI+ PoC MS08-052 ef: behavior: urldefaultVML; ================================================ MS08-052: GDI+ Vulnerability ------------------------------------------------ Operating System: XP SP2 Internet Explorer Version: 6.0.2900.2180 Gdiplus.dll Version:...

MS Internet Explorer GDI+ Proof of Concept (MS08-052)

No description provided by source. html head STYLE ef: behavior: urldefaultVML; /STYLE /head body pre ================================================ MS08-052: GDI+ Vulnerability ------------------------------------------------ Operating System: XP SP2 Internet Explorer Version: 6.0.2900.2180...

Microsoft Internet Explorer - GDI+ (PoC) (MS08-052)

ef: behavior: urldefaultVML; ================================================ MS08-052: GDI+ Vulnerability ------------------------------------------------ Operating System: XP SP2 Internet Explorer Version: 6.0.2900.2180 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers Link:...

MS Windows GDI+ (.ico File) Remote Division By Zero Exploit

No description provided by source. MS Windows GDI+ .ico Remote Division By Zero Application: GDIPLUS.DLL Web Site: http://www.microsoft.com/ Platform: Windows Bug: Division By Zero Tested agains: XP SP3 fully patched Note: This have nothing to do with http://milw0rm.com/exploits/4044...

Microsoft Windows - GDI+ '.ICO' Remote Division By Zero

MS Windows GDI+ .ico Remote Division By Zero Application: GDIPLUS.DLL Web Site: http://www.microsoft.com/ Platform: Windows Bug: Division By Zero Tested agains: XP SP3 fully patched Note: This have nothing to do with http://milw0rm.com/exploits/4044...

mswingdi-dos.txt

MS Windows GDI+ .ico Remote Division By Zero Application: GDIPLUS.DLL Web Site: http://www.microsoft.com/ Platform: Windows Bug: Division By Zero Tested agains: XP SP3 fully patched Note: This have nothing to do with http://milw0rm.com/exploits/4044...

MS Windows GDI+ (.ico File) Remote Division By Zero Exploit

Exploit for unknown platform in category dos / poc =========================================================== MS Windows GDI+ .ico File Remote Division By Zero Exploit =========================================================== MS Windows GDI+ .ico Remote Division By Zero Application: GDIPLUS.DL...

Microsoft Windows - GDI+ .ICO Remote Division By Zero

Microsoft Windows - GDI+ .ICO Remote Division By Zero MS Windows GDI+ .ico Remote Division By Zero Application: GDIPLUS.DLL Web Site: http://www.microsoft.com/ Platform: Windows Bug: Division By Zero Tested agains: XP SP3 fully patched Note: This have nothing to do with...