CVE-2008-1087 Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF image file with c...
HighCVSS 9.3
EPSS 56.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF image file with crafted filename parameters, aka "GDI Stack Overflow Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows-nt | = 2008 | No fix listed |
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | All versions | No fix listed |
| Microsoft windows vista | All versions | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- SSRT080048 mailing-list vendor-advisory
- 29704 third-party-advisory vendor-advisory
- 44215 broken-link vdb-entry
- 28570 patch vdb-entry
- 1019798 third-party-advisory vdb-entry
- TA08-099A third-party-advisory us-government-resource
- ADV-2008-1145 broken-link vdb-entry
- MS08-021 vendor-advisory
- oval:org.mitre.oval:def:5580 signature vdb-entry
- 5442 exploit
- 6656 exploit