Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Microsoft GDI+ WMF Image File Buffer Overflow Vulnerability

A WMF file containing a PolyPolygon record (type 0x0538) with a count of 8192 polygons, each specifying 65535 points, is sufficient to cause a heap overflow and to crash the application that is using GDI+.

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.







 

Privacy Statement
Copyright 2008, SecurityFocus