Update Protection against Microsoft Windows GDIplus GpFont.SetData Integer Overflow

A vulnerability has been reported in Microsoft Windows Graphics Device Interface GDI. GDI is a Microsoft standard for representing graphical objects and outputting these representations to devices such as monitors and printers. The vulnerability occurs when an application that uses the affected...

Mandriva Update for openoffice.org MDVSA-2008:095 (openoffice.org)

Check for the Version of openoffice.org OpenVAS Vulnerability Test Mandriva Update for openoffice.org MDVSA-2008:095 openoffice.org Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Mandriva Update for openoffice.org MDVSA-2008:095 (openoffice.org)

Check for the Version of openoffice.org OpenVAS Vulnerability Test Mandriva Update for openoffice.org MDVSA-2008:095 openoffice.org Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Microsoft GDIPlus Library File Integer Overflow Vulnerability

GDIPlus Library is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft GDIPlus Library File Integer Overflow Vulnerability

This host is having GDIPlus Library and is prone to Integer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: gbgdiplusintoverflowvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Microsoft GDIPlus Library File Integer Overflow Vulnerability Authors: Sujit Ghosal Copyright c 2009 Greenbone Networks...

Microsoft Windows GDI+库GPFont::SetData()函数单字节溢出漏洞

BUGTRAQ ID: 34250 CVECAN ID: CVE-2009-1217 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的GDI+函数库（gdiplus.dll）的GPFont::SetData函数中存在单字节溢出漏洞。如果用户受骗打开了 EmfPlusFontObject记录中设置有特制字体长度值的EMF图形的话，就可以触发这个溢出，导致使用该库的应用程序崩溃。以下是 Windows XP中的有漏洞代码段： define FamilyNameMax 32 ... WCHAR familyNameFamilyNameMax;...

Integer overflow

Off-by-one error in the GpFont::SetData function in gdiplus.dll in Microsoft GDI+ on Windows XP allows remote attackers to cause a denial of service stack corruption and application termination via a crafted EMF file that triggers an integer overflow, as demonstrated by voltage-exploit.emf, aka t...

CVE-2009-1217

Off-by-one error in the GpFont::SetData function in gdiplus.dll in Microsoft GDI+ on Windows XP allows remote attackers to cause a denial of service stack corruption and application termination via a crafted EMF file that triggers an integer overflow, as demonstrated by voltage-exploit.emf, aka t...

CVE-2009-1217

The CVE-2009-1217 issue affects Microsoft GDI+ (gdiplus.dll) on Windows XP, where the GPFont::SetData function can overflow when parsing an EMF file, leading to a denial of service via stack corruption. All sources consistently describe an off-by-one/integer overflow condition triggered by specia...

Microsoft GdiPlus EMF GpFont.SetData Integer Overflow PoC

No description provided by source. Microsoft GdiPlus.dll EMF GpFont::SetData Stack Overflow Write up by [email protected] : http://bl4cksecurity.blogspot.com/2009/03/microsoft-gdiplus-emf-gpfontsetdata.html Credits to mIKEJONES for providing the .EMF Crash down:...

Microsoft GdiPlus - EMF GpFont.SetData Integer Overflow (PoC)

Microsoft GdiPlus - EMF GpFont.SetData Integer Overflow PoC Microsoft GdiPlus.dll EMF GpFont::SetData Stack Overflow Write up by [email protected] : http://bl4cksecurity.blogspot.com/2009/03/microsoft-gdiplus-emf-gpfontsetdata.html Credits to mIKEJONES for providing the .EMF Crash down:...

Microsoft GdiPlus - EMF GpFont.SetData Integer Overflow (PoC)

Microsoft GdiPlus.dll EMF GpFont::SetData Stack Overflow Write up by [email protected] : http://bl4cksecurity.blogspot.com/2009/03/microsoft-gdiplus-emf-gpfontsetdata.html Credits to mIKEJONES for providing the .EMF Crash down: http://www.blacksecurity.org/voltage-exploit.emf back:...

Microsoft GdiPlus EMF GpFont.SetData Integer Overflow PoC

Exploit for unknown platform in category dos / poc ========================================================= Microsoft GdiPlus EMF GpFont.SetData Integer Overflow PoC ========================================================= Microsoft GdiPlus.dll EMF GpFont::SetData Stack Overflow...

Ubuntu Update for openoffice.org, openoffice.org-amd64 vulnerabilities USN-677-1

Ubuntu Update for Linux kernel vulnerabilities USN-677-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6771.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for openoffice.org, openoffice.org-amd64 vulnerabilities USN-677-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone...

Microsoft Windows内核GDI EMF/WMF解析远程代码执行漏洞（MS09-006）

BUGTRAQ ID: 34015 CVECAN ID: CVE-2009-0085 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的GDI内核组件没有正确地验证用户态所传送输入，如果用户受骗查看了恶意网站上的特制EMF或WMF图形文件的话，就可能导致在系统上执行任意内核态代码。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP1 Microsoft Windows Vista Microsoft Windows Server 2008...

Vulnerabilities in Windows Kernel Could Allow Remote Code Execution (958690)

This host is missing a critical security update according to Microsoft Bulletin MS09-006. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS09-006: Vulnerabilities in Windows Kernel Could Allow Remote Code Execution (958690)

The remote host contains a version of the Windows kernel that is affected by vulnerabilities : - A remote code execution vulnerability exists due to improper validation of input passed from user mode through the kernel component of GDI. Successful exploitation requires that a user on the affected...

Microsoft Windows kernel multiple security vulnerabilities

Multiple security vulnerabilities allow code execution via EMF/WMF files...

Microsoft Windows Kernel Input Validation Remote Code Execution (MS09-006; CVE-2009-0081)

The Windows kernel is the core of the operating system. It provides system level services, allocates processor time to processes, and manages error handling. A remote code execution vulnerability has been discovered in the Windows kernel.The vulnerability is due to an error in the Windows kernel...

RedHat Update for openoffice.org RHSA-2008:0175-01

Check for the Version of openoffice.org OpenVAS Vulnerability Test RedHat Update for openoffice.org RHSA-2008:0175-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...