iDefense Security Advisory 04.08.08: Microsoft Windows Graphics Rendering Engine Integer Overflow Vulnerability

iDefense Security Advisory 04.08.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 08, 2008 I. BACKGROUND Microsoft Windows graphics device interface GDI is the core library used to display graphics and text on the Windows operating system. It is the standard interface through which...

iDefense Security Advisory 04.08.08: Microsoft Windows Graphics Rendering Engine Heap Buffer Overflow Vulnerability

iDefense Security Advisory 04.08.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 08, 2008 I. BACKGROUND Microsoft Windows graphics device interface GDI is the core library used to display graphics and text on the Windows operating system. It is the standard interface through which...

ZDI-08-020: Microsoft GDI WMF Parsing Heap Overflow Vulnerability

ZDI-08-020: Microsoft GDI WMF Parsing Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-020 -- CVE ID: CVE-2008-1083 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Windows XP SP2 Microsoft Windows 2003 SP1 Microsoft Windows Vista -- Vulnerability...

CVE-2008-1083

CVE-2008-1083 describes a remote-code-execution vulnerability in the Windows GDI component. The flaw occurs in the CreateDIBPatternBrushPt function when parsing malformed EMF/WMF image headers, leading to a heap-based/integer overflow in GDI and potentially arbitrary code execution on affected sy...

Microsoft Windows GDI Metafile Image Handling Heap Overflow (MS08-021; CVE-2008-1083)

The Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on the video display and on the printer.WMF and EMF are image formats used in many Windows programs including Internet Explorer and Outlook. A remote code execution vulnerability has been...