openSUSE 10 Security Update : libwmf (libwmf-1840)

A heap overflow could be triggered by specially crafted WMF Windows Meta Files in the libwmf library. This problem could be exploited to execute code, by a remote attacker providing a file with embedded WMF data to an application understanding this like OpenOfficeorg, abiword, gimp. This issue is...

MS Windows (GDI32.DLL) Denial of Service Exploit (MS07-046)

No description provided by source. / MS07-046GDI32.dll Integer overflow DOS Proof Of Concept Code by Hong Gil-Dong & Chun Woo-Chi Yang yeon?1542, Korea "I shall keep clenching my left fist unitl i see the real tao". This POC is only for test. If an application read a malformed wmf file like this...

Microsoft Windows - 'gdi32.dll' Denial of Service (MS07-046)

/ MS07-046GDI32.dll Integer overflow DOS Proof Of Concept Code by Hong Gil-Dong & Chun Woo-Chi Yang yeon?1542, Korea "I shall keep clenching my left fist unitl i see the real tao". This POC is only for test. If an application read a malformed wmf file like this POC, the application will be crashe...

Re: GDI+ and Internet Explorer question

IE has its own image decoders for many image types jpeg, ico, etc. You can trigger this bug remotely by renaming your .ico to .emf or .wmf, which forces it be opened by the Picture and Fax Viewer using GDI+. -HD On Saturday 09 June 2007 06:40, [email protected] wrote: fails to crash my Internet...

CVE-2007-1211

Unspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1, and SP2 allows user-assisted remote attackers to cause a denial of service possibly persistent restart via a crafted Windows Metafile WMF image that causes an invalid dereference of an offset in a...

CVE-2007-1211

Unspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1, and SP2 allows user-assisted remote attackers to cause a denial of service possibly persistent restart via a crafted Windows Metafile WMF image that causes an invalid dereference of an offset in a...

iDefense Security Advisory 04.03.07: Microsoft Windows WMF Triggerable Kernel Design Error DoS Vulnerability

Microsoft Windows WMF Triggerable Kernel Design Error DoS Vulnerability iDefense Security Advisory 04.03.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 03, 2007 I. BACKGROUND The Microsoft Windows kernel controls which processes are allowed to run and is responsible for accessing...

Microsoft Windows DoS with WMF files

Uninitialized memory reference in system kernel...

CVE-2007-1245

IrfanView 3.99 allows remote attackers to cause a denial of service application crash via a malformed WMF file...

Code injection

IrfanView 3.99 allows remote attackers to cause a denial of service application crash via a malformed WMF file...

Design/Logic Flaw

Microsoft Office 2003 allows user-assisted remote attackers to cause a denial of service application crash by attempting to insert a corrupted WMF file...

CVE-2007-1238

Microsoft Office 2003 allows user-assisted remote attackers to cause a denial of service application crash by attempting to insert a corrupted WMF file...

CVE-2007-1245

CVE-2007-1245 affects IrfanView 3.99, where a malformed WMF file can trigger a denial of service (application crash). The root cause is inputs in WMF parsing leading to instability. Exploitation status is not described beyond the DoS impact. The provided documents do not specify a patch or versio...

CVE-2007-1245

IrfanView 3.99 allows remote attackers to cause a denial of service application crash via a malformed WMF file...

CVE-2007-1238

Microsoft Office 2003 allows user-assisted remote attackers to cause a denial of service application crash by attempting to insert a corrupted WMF file...

Microsoft Windows资源管理器WMF文件处理拒绝服务漏洞

Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统的资源管理器在处理畸形WMF文件时存在拒绝服务漏洞，可能导致资源管理器崩溃。 利用此漏洞无需直接打开畸形WMF文件，只要资源管理器处理包含畸形文件的目录时能导致崩溃。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows XP Microsoft Windows Server 2003 SP1 Microsoft Windows Server 2003...

Design/Logic Flaw

Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service crash via a malformed WMF file, which triggers the crash when the user browses the folder...

CVE-2007-1090

Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service crash via a malformed WMF file, which triggers the crash when the user browses the folder...

CVE-2007-1090

CVE-2007-1090 affects Microsoft Windows Explorer on Windows XP and Windows Server 2003. A vulnerability exists in handling a malformed WMF file, which can cause a denial-of-service (crash) when a user browses a folder, reported as remote user‑assisted. Core details indicate the flaw is triggered ...

CVE-2007-1090

Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service crash via a malformed WMF file, which triggers the crash when the user browses the folder...