CVE-2008-1083 Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbi...
HighCVSS 9.3
EPSS 57.0%
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF or WMF image file with a malformed header that triggers an integer overflow, aka "GDI Heap Overflow Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | All versions | No fix listed |
| Microsoft windows server 2008 | All versions | No fix listed |
| Microsoft windows vista | All versions | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 20080408 ZDI-08-020: Microsoft GDI WMF Parsing Heap Overflow Vulnerability broken-link mailing-list
- 20080408 Microsoft Windows Graphics Rendering Engine Integer Overflow Vulnerability third-party-advisory
- SSRT080048 mailing-list vendor-advisory
- 29704 patch third-party-advisory vendor-advisory
- 948590 vendor-advisory
- VU#632963 third-party-advisory us-government-resource
- 44213 broken-link vdb-entry
- 44214 broken-link vdb-entry
- 20080408 ZDI-08-020: Microsoft GDI WMF Parsing Heap Overflow Vulnerability mailing-list
- 28571 third-party-advisory vdb-entry
- 30933 third-party-advisory vdb-entry
- 1019798 third-party-advisory vdb-entry
- TA08-099A third-party-advisory us-government-resource
- ADV-2008-1145 broken-link vdb-entry
- www.zerodayinitiative.com third-party-advisory
- MS08-021 vendor-advisory
- win-emf-wmf-header-bo(41471) vdb-entry
- oval:org.mitre.oval:def:5441 signature vdb-entry
- 5442 exploit
- 6330 exploit