CVE-2008-2249

Integer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via a malformed header in a crafted WMF file, which triggers a buffer overflow, aka "GDI Integer Overflow...

CVE-2008-2249

An integer overflow in the GDI (Graphics Device Interface) allows remote code execution on various Microsoft Windows versions, including Windows 2000 SP4 , XP SP2/SP3 , Server 2003 SP1/SP2 , Vista Gold/SP1 , and Server 2008 . The vulnerability occurs because GDI improperly handles integer calcula...

iDefense Security Advisory 12.09.08: Microsoft Windows Graphics Device Interface Integer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 12.09.08 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 09, 2008 I. BACKGROUND Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on both the video display and...