• info
• discussion
• exploit
• solution
• references

Microsoft Windows Kernel GDI EMF/WMF Remote Code Execution Vulnerability

Solution:
Vendor advisory and updates are available. Please see the references for details.


Microsoft Windows Server 2003 Datacenter Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=f5cfb8da-e7cc -4183-8631-507c2a406500

Microsoft Windows XP Media Center Edition SP2

• Microsoft Security Update for Windows XP (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=e09641ba-6cbe -4095-82b5-703d3a7dc33b

Microsoft Windows Server 2003 Itanium SP1

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=04be3d7e-7dda -4dca-887a-e7a8156ede1c

Microsoft Windows Server 2003 Enterprise Edition Itanium SP1

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=04be3d7e-7dda -4dca-887a-e7a8156ede1c

Microsoft Windows Vista x64 Edition 0

• Microsoft Security Update for Windows Vista for x64-based Systems (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=0fcac480-d6db -4a94-8c7d-b7319282cf56

Microsoft Windows Server 2003 Datacenter x64 Edition SP2

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=ecf75c70-8489 -41ad-9759-3a07e13957be

Microsoft Windows Vista Home Basic SP1

• Microsoft Security Update for Windows Vista (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=4b1aaaba-f355 -4265-83c0-50b901856ced

Microsoft Windows XP Tablet PC Edition SP2

• Microsoft Security Update for Windows XP (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=e09641ba-6cbe -4095-82b5-703d3a7dc33b

Microsoft Windows XP Media Center Edition SP3

• Microsoft Security Update for Windows XP (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=e09641ba-6cbe -4095-82b5-703d3a7dc33b

Microsoft Windows Server 2003 Web Edition SP2

• Microsoft Security Update for Windows Server 2003 (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=f5cfb8da-e7cc -4183-8631-507c2a406500

Microsoft Windows Vista Home Premium

• Microsoft Security Update for Windows Vista (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=4b1aaaba-f355 -4265-83c0-50b901856ced

Microsoft Windows Server 2003 Standard Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=f5cfb8da-e7cc -4183-8631-507c2a406500

Microsoft Windows Server 2003 x64 SP1

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=ecf75c70-8489 -41ad-9759-3a07e13957be

Microsoft Windows Vista Enterprise

• Microsoft Security Update for Windows Vista (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=4b1aaaba-f355 -4265-83c0-50b901856ced

Microsoft Windows XP Professional x64 Edition SP2

• Microsoft Security Update for Windows XP x64 Edition (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=d0d704c6-48c2 -4907-b6c3-2455d7cf21c8

Microsoft Windows Vista 0

• Microsoft Security Update for Windows Vista (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=4b1aaaba-f355 -4265-83c0-50b901856ced

Microsoft Windows Vista Business

• Microsoft Security Update for Windows Vista (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=4b1aaaba-f355 -4265-83c0-50b901856ced

Microsoft Windows Server 2003 x64 SP2

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=ecf75c70-8489 -41ad-9759-3a07e13957be

Microsoft Windows Vista x64 Edition SP1

• Microsoft Security Update for Windows Vista for x64-based Systems (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=0fcac480-d6db -4a94-8c7d-b7319282cf56

Microsoft Windows Vista Ultimate SP1

• Microsoft Security Update for Windows Vista (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=4b1aaaba-f355 -4265-83c0-50b901856ced

Microsoft Windows Server 2003 Enterprise x64 Edition

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=ecf75c70-8489 -41ad-9759-3a07e13957be

Microsoft Windows XP Tablet PC Edition SP3

• Microsoft Security Update for Windows XP (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=e09641ba-6cbe -4095-82b5-703d3a7dc33b

Microsoft Windows Server 2003 Datacenter x64 Edition

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=ecf75c70-8489 -41ad-9759-3a07e13957be

Microsoft Windows Server 2003 Enterprise Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=f5cfb8da-e7cc -4183-8631-507c2a406500

Microsoft Windows Vista SP1

• Microsoft Security Update for Windows Vista (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=4b1aaaba-f355 -4265-83c0-50b901856ced

Microsoft Windows Server 2008 for x64-based Systems 0

• Microsoft Security Update for Windows Server 2008 x64 Edition (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=ec15acc4-3e0f -4414-9383-61c122ff1382

Microsoft Windows Vista Home Basic

• Microsoft Security Update for Windows Vista (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=4b1aaaba-f355 -4265-83c0-50b901856ced

Microsoft Windows Vista Business SP1

• Microsoft Security Update for Windows Vista (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=4b1aaaba-f355 -4265-83c0-50b901856ced

Microsoft Windows 2000 Advanced Server SP4

• Microsoft Security Update for Windows 2000 (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=98bb7d40-89a0 -470a-8eb7-06f15072a635

Microsoft Windows Vista Ultimate

• Microsoft Security Update for Windows Vista (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=4b1aaaba-f355 -4265-83c0-50b901856ced

Microsoft Windows Server 2003 SP2

• Microsoft Security Update for Windows Server 2003 (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=f5cfb8da-e7cc -4183-8631-507c2a406500

Microsoft Windows Vista Home Premium SP1

• Microsoft Security Update for Windows Vista (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=4b1aaaba-f355 -4265-83c0-50b901856ced

Microsoft Windows Server 2003 Standard Edition SP2

• Microsoft Security Update for Windows Server 2003 (KB958690)
  http://www.microsoft.com/downloads/details.aspx?familyid=f5cfb8da-e7cc -4183-8631-507c2a406500