• info
• discussion
• exploit
• solution
• references

Microsoft Windows GDI Invalid Window Size Local Privilege Escalation Vulnerability

Solution:
Microsoft released an advisory and updates to address this issue. Please see the references for more information.


Microsoft Windows XP Media Center Edition SP2

• Microsoft Update for Windows XP (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=F82EA184-945F -4B78-9463-10AC20A75020&displaylang=en


• Microsoft Update for Windows XP (KB935843)
  http://www.microsoft.com/downloads/details.aspx?familyid=69443B00-F831 -4785-B292-DBF8CF002C6A&displaylang=en

Microsoft Windows XP Tablet PC Edition SP2

• Microsoft Update for Windows XP (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=F82EA184-945F -4B78-9463-10AC20A75020&displaylang=en


• Microsoft Update for Windows XP (KB935843)
  http://www.microsoft.com/downloads/details.aspx?familyid=69443B00-F831 -4785-B292-DBF8CF002C6A&displaylang=en

Microsoft Windows 2000 Advanced Server SP4

• Microsoft Security Update for Windows 2000 (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=92F20599-3E7B -4217-91E6-FDCFB4C56856&displaylang=en


• Microsoft Update for Windows 2000 (KB935843)
  http://www.microsoft.com/downloads/details.aspx?familyid=FB630B61-F84F -4D4C-8E6C-0A7E8210A506&displaylang=en

Microsoft Windows XP Home SP2

• Microsoft Update for Windows XP (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=F82EA184-945F -4B78-9463-10AC20A75020&displaylang=en


• Microsoft Update for Windows XP (KB935843)
  http://www.microsoft.com/downloads/details.aspx?familyid=69443B00-F831 -4785-B292-DBF8CF002C6A&displaylang=en

Microsoft Windows 2000 Datacenter Server SP4

• Microsoft Security Update for Windows 2000 (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=92F20599-3E7B -4217-91E6-FDCFB4C56856&displaylang=en


• Microsoft Update for Windows 2000 (KB935843)
  http://www.microsoft.com/downloads/details.aspx?familyid=FB630B61-F84F -4D4C-8E6C-0A7E8210A506&displaylang=en

Microsoft Windows XP Professional x64 Edition

• Microsoft Security Update for Windows XP x64 Edition (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=EA5E1B87-4DB5 -4B1A-891E-29C6BD6C0184&displaylang=en

Microsoft Windows XP Professional SP2

• Microsoft Update for Windows XP (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=F82EA184-945F -4B78-9463-10AC20A75020&displaylang=en


• Microsoft Update for Windows XP (KB935843)
  http://www.microsoft.com/downloads/details.aspx?familyid=69443B00-F831 -4785-B292-DBF8CF002C6A&displaylang=en

Microsoft Windows 2000 Server SP4

• Microsoft Security Update for Windows 2000 (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=92F20599-3E7B -4217-91E6-FDCFB4C56856&displaylang=en


• Microsoft Update for Windows 2000 (KB935843)
  http://www.microsoft.com/downloads/details.aspx?familyid=FB630B61-F84F -4D4C-8E6C-0A7E8210A506&displaylang=en

Microsoft Windows 2000 Professional SP4

• Microsoft Security Update for Windows 2000 (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=92F20599-3E7B -4217-91E6-FDCFB4C56856&displaylang=en


• Microsoft Update for Windows 2000 (KB935843)
  http://www.microsoft.com/downloads/details.aspx?familyid=FB630B61-F84F -4D4C-8E6C-0A7E8210A506&displaylang=en