Microsoft Windows GDI WMF File HeaderSize Buffer Overflow (MS08-071; CVE-2008-2249)

The Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on the video display and on the printer. A remote code execution vulnerability has been discovered in the way GDI handles integer calculations. The vulnerability is due to a buffer overflow...

CVE-2008-2237

Heap-based buffer overflow in OpenOffice.org OOo 2.x before 2.4.2 allows remote attackers to execute arbitrary code via a crafted WMF file associated with a StarOffice/StarSuite document...

Heap overflow

Heap-based buffer overflow in OpenOffice.org OOo 2.x before 2.4.2 allows remote attackers to execute arbitrary code via a crafted WMF file associated with a StarOffice/StarSuite document...

CVE-2008-2237

Heap-based buffer overflow in OpenOffice.org OOo 2.x before 2.4.2 allows remote attackers to execute arbitrary code via a crafted WMF file associated with a StarOffice/StarSuite document...

CVE-2008-2237

Heap-based buffer overflow in OpenOffice.org OOo 2.x before 2.4.2 allows remote attackers to execute arbitrary code via a crafted WMF file associated with a StarOffice/StarSuite document...

CVE-2008-2237

CVE-2008-2237 describes a heap-based overflow in the OpenOffice.org WMF image handling that could allow remote code execution via a crafted WMF file. Affected: OpenOffice.org 2.x up to 2.4.2. The issue also relates to similar integer overflow/heap overflow flaws in the EMF parser (CVE-2008-2238)....

Microsoft Windows - 'gdi32.dll' Denial of Service (MS07-046)

/ MS07-046GDI32.dll Integer overflow DOS Proof Of Concept Code by Hong Gil-Dong & Chun Woo-Chi Yang yeon?1542, Korea "I shall keep clenching my left fist unitl i see the real tao". This POC is only for test. If an application read a malformed wmf file like this POC, the application will be crashe...

Code injection

IrfanView 3.99 allows remote attackers to cause a denial of service application crash via a malformed WMF file...

CVE-2007-1245

IrfanView 3.99 allows remote attackers to cause a denial of service application crash via a malformed WMF file...

Design/Logic Flaw

Microsoft Office 2003 allows user-assisted remote attackers to cause a denial of service application crash by attempting to insert a corrupted WMF file...

CVE-2007-1238

Microsoft Office 2003 allows user-assisted remote attackers to cause a denial of service application crash by attempting to insert a corrupted WMF file...

CVE-2007-1245

IrfanView 3.99 allows remote attackers to cause a denial of service application crash via a malformed WMF file...

Design/Logic Flaw

Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service crash via a malformed WMF file, which triggers the crash when the user browses the folder...

CVE-2007-1090

Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service crash via a malformed WMF file, which triggers the crash when the user browses the folder...

Microsoft Windows XP2003 - Explorer .WMF File Handling Denial of Service

Microsoft Windows XP2003 - Explorer .WMF File Handling Denial of Service source: https://www.securityfocus.com/bid/22715/info Microsoft Windows Explorer is prone to a denial-of-service vulnerability. A remote attacker may exploit this vulnerability by presenting a malicious file to a victim user...

Microsoft Windows XP/2003 - Explorer '.WMF' File Handling Denial of Service

source: https://www.securityfocus.com/bid/22715/info Microsoft Windows Explorer is prone to a denial-of-service vulnerability. A remote attacker may exploit this vulnerability by presenting a malicious file to a victim user. Users do not have to open the file -- simply browsing a folder containin...

Microsoft Office 2003 - Denial of Service

Microsoft Office 2003 - Denial of Service source: https://www.securityfocus.com/bid/22716/info Microsoft Office is prone to a denial-of-service condition when the malformed WMF file is viewed in an Office application. Exploiting this issue allows remote attackers to crash applications, denying...

WMF File Denial Of Service

WMF File Denial Of Service Программа "Microsoft Office Word 2003" подвисает при вставке спецрисункаиз файла в формате WMF Программа "IrfanView" подвисает при открытии файла формата WMF Протестированно: Microsoft Office Word 2003 11.6568.8122 SP2 IrfanView 3.99 Windows XP SP2...

wmfdos.txt

!/usr/bin/perl print "\nWMF PoC denial of service exploit by cyanid-E "; print "\n\ngenerating brush.wmf..."; openWMF, "./brush.wmf" or die "cannot create wmf file\n"; print WMF "\x01\x00\x09\x00\x00\x03\x22\x00\x00\x00\x63\x79\x61\x6E\x69\x64"; print WMF...

CentOS 3 / 4 : openoffice.org (CESA-2007:0001)

Updated openoffice.org packages are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop applications such as a word processor, spreadsheet, presentation manager,...