Microsoft Windows GDI Multiple Vulnerabilities (925902)

Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service persistent reboot via a large length value in the second or later anih block of a RIFF .ANI, cur, or .ico file, which...

CVE-2007-1213

CVE-2007-1213 is a local elevation-of-privilege flaw in the Windows 2000 SP4 TrueType Font Rasterizer. The vulnerability arises when processing defective or modified fonts, which can cause an uninitialized function pointer and allow a logged-on user to gain full control of the system. Public docu...