Microsoft GDI+ WMF图像文件缓冲区溢出漏洞(MS08-052)

                                                A WMF file containing a PolyPolygon record (type 0x0538) with a count of 8192 polygons, each specifying 65535 points, is sufficient to cause a heap overflow and to crash the application that is using GDI+.

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild. 

Successfully exploiting this issue would allow an attacker to corrupt memory and execute arbitrary code in the context of the currently logged-in user.