MS Windows GDI Image Parsing Stack Overflow Exploit (MS08-021)

🗓️ 15 Apr 2008 00:00:00Reported by RootType

MS Windows GDI Image Parsing Stack Overflow Exploit (MS08-021) by Lamhtz, April 14th, 2008. Crafted EMF file to run calc.exe in Win2kSP4, an exploitable version without MS08-021


                                                /////////////////////////////////////////////////////////////
///Exploit&nbsp;the&nbsp;MS08-021&nbsp;:&nbsp;Stack&nbsp;Overflow&nbsp;on&nbsp;GDI&nbsp;API
///Author:&nbsp;Lamhtz
///Date:&nbsp;April&nbsp;14th,&nbsp;2008
///Usage:&nbsp;&lt;appname.exe&gt;&nbsp;[filename]
///Function:&nbsp;Generate&nbsp;a&nbsp;crafted&nbsp;emf&nbsp;file&nbsp;which&nbsp;could&nbsp;
///&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;automatically&nbsp;run&nbsp;calc.exe&nbsp;in&nbsp;Win2kSP4&nbsp;CHS&nbsp;Version
///			&nbsp;with&nbsp;MS07-046&nbsp;patched&nbsp;but&nbsp;no&nbsp;MS08-021&nbsp;is&nbsp;installed.
///			&nbsp;In&nbsp;Windows&nbsp;XP&nbsp;SP2,&nbsp;explorer.exe&nbsp;will&nbsp;crashed&nbsp;but
///&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;calc&nbsp;will&nbsp;not&nbsp;be&nbsp;run.
/////////////////////////////////////////////////////////////

http://www.milw0rm.com/sploits/2008-exploit_08021.zip

15 Apr 2008 00:00Current

7.1High risk

Vulners AI Score7.1