• info
• discussion
• exploit
• solution
• references

Microsoft Windows Graphics Rendering Engine EMF File Privilege Escalation Vulnerability

Solution:
Microsoft has released a bulletin that includes fixes to address this issue. Please see the references for more information.


Microsoft Windows Server 2003 Datacenter Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=9F73A782-DEAF -46E0-B3E0-79042FF39979&displaylang=en

Microsoft Windows XP Media Center Edition SP2

• Microsoft Update for Windows XP (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=F82EA184-945F -4B78-9463-10AC20A75020&displaylang=en


• Microsoft Update for Windows XP (KB935843)
  http://www.microsoft.com/downloads/details.aspx?familyid=69443B00-F831 -4785-B292-DBF8CF002C6A&displaylang=en

Microsoft Windows Server 2003 Itanium SP1

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=7BA63879-4FC7 -4A5C-B9B5-F98C5CDC6840&displaylang=en

Microsoft Windows Server 2003 Itanium 0

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=7BA63879-4FC7 -4A5C-B9B5-F98C5CDC6840&displaylang=en

Microsoft Windows Server 2003 Enterprise Edition Itanium SP1

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=7BA63879-4FC7 -4A5C-B9B5-F98C5CDC6840&displaylang=en

Microsoft Windows Vista x64 Edition 0

• Microsoft Security Update for Windows Vista for x64-based Systems (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=FB0FF2B5-05FE -4158-B4B7-DA0D7F82C04B&displaylang=en

Microsoft Windows Server 2003 Datacenter x64 Edition SP2

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=3276DD11-4E2F -4183-A542-82AC3C6D9754&displaylang=en

Microsoft Windows XP Tablet PC Edition SP2

• Microsoft Update for Windows XP (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=F82EA184-945F -4B78-9463-10AC20A75020&displaylang=en


• Microsoft Update for Windows XP (KB935843)
  http://www.microsoft.com/downloads/details.aspx?familyid=69443B00-F831 -4785-B292-DBF8CF002C6A&displaylang=en

Microsoft Windows Server 2003 Enterprise Edition Itanium 0

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=7BA63879-4FC7 -4A5C-B9B5-F98C5CDC6840&displaylang=en

Microsoft Windows Server 2003 Web Edition SP2

• Microsoft Security Update for Windows Server 2003 (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=9F73A782-DEAF -46E0-B3E0-79042FF39979&displaylang=en

Microsoft Windows Vista Home Premium

• Microsoft Security Update for Windows Vista (KB925902) - English
  http://www.microsoft.com/downloads/details.aspx?familyid=D8B0E65C-5B41 -46EB-92DF-0B062CFCDEEC&displaylang=en

Microsoft Windows Server 2003 Standard Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=9F73A782-DEAF -46E0-B3E0-79042FF39979&displaylang=en

Microsoft Windows Vista Enterprise

• Microsoft Security Update for Windows Vista (KB925902) - English
  http://www.microsoft.com/downloads/details.aspx?familyid=D8B0E65C-5B41 -46EB-92DF-0B062CFCDEEC&displaylang=en

Microsoft Windows XP Professional x64 Edition SP2

• Microsoft Security Update for Windows Server 2003 (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=9F73A782-DEAF -46E0-B3E0-79042FF39979&displaylang=en


• Microsoft Security Update for Windows XP x64 Edition (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=EA5E1B87-4DB5 -4B1A-891E-29C6BD6C0184&displaylang=en

Microsoft Windows Server 2003 Standard Edition

• Microsoft Security Update for Windows Server 2003 (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=9F73A782-DEAF -46E0-B3E0-79042FF39979&displaylang=en

Microsoft Windows Vista 0

• Microsoft Security Update for Windows Vista (KB925902) - English
  http://www.microsoft.com/downloads/details.aspx?familyid=D8B0E65C-5B41 -46EB-92DF-0B062CFCDEEC&displaylang=en

Microsoft Windows Vista Business

• Microsoft Security Update for Windows Vista (KB925902) - English
  http://www.microsoft.com/downloads/details.aspx?familyid=D8B0E65C-5B41 -46EB-92DF-0B062CFCDEEC&displaylang=en

Microsoft Windows Server 2003 Enterprise x64 Edition

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=3276DD11-4E2F -4183-A542-82AC3C6D9754&displaylang=en

Microsoft Windows Server 2003 Datacenter Edition Itanium 0

• Microsoft Security Update for Windows Server 2003 (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=9F73A782-DEAF -46E0-B3E0-79042FF39979&displaylang=en

Microsoft Windows Server 2003 Datacenter x64 Edition

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=3276DD11-4E2F -4183-A542-82AC3C6D9754&displaylang=en

Microsoft Windows Server 2003 Enterprise Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=9F73A782-DEAF -46E0-B3E0-79042FF39979&displaylang=en

Microsoft Windows Vista Home Basic

• Microsoft Security Update for Windows Vista (KB925902) - English
  http://www.microsoft.com/downloads/details.aspx?familyid=D8B0E65C-5B41 -46EB-92DF-0B062CFCDEEC&displaylang=en

Microsoft Windows Server 2003 Datacenter Edition

• Microsoft Security Update for Windows Server 2003 (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=9F73A782-DEAF -46E0-B3E0-79042FF39979&displaylang=en

Microsoft Windows 2000 Advanced Server SP4

• Microsoft Security Update for Windows 2000 (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=92F20599-3E7B -4217-91E6-FDCFB4C56856&displaylang=en


• Microsoft Update for Windows 2000 (KB935843)
  http://www.microsoft.com/downloads/details.aspx?familyid=FB630B61-F84F -4D4C-8E6C-0A7E8210A506&displaylang=en

Microsoft Windows Vista Ultimate

• Microsoft Security Update for Windows Vista (KB925902) - English
  http://www.microsoft.com/downloads/details.aspx?familyid=D8B0E65C-5B41 -46EB-92DF-0B062CFCDEEC&displaylang=en

Microsoft Windows Server 2003 Enterprise Edition

• Microsoft Security Update for Windows Server 2003 (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=9F73A782-DEAF -46E0-B3E0-79042FF39979&displaylang=en

Microsoft Windows XP Home SP2

• Microsoft Update for Windows XP (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=F82EA184-945F -4B78-9463-10AC20A75020&displaylang=en


• Microsoft Update for Windows XP (KB935843)
  http://www.microsoft.com/downloads/details.aspx?familyid=69443B00-F831 -4785-B292-DBF8CF002C6A&displaylang=en

Microsoft Windows 2000 Datacenter Server SP4

• Microsoft Security Update for Windows 2000 (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=92F20599-3E7B -4217-91E6-FDCFB4C56856&displaylang=en


• Microsoft Update for Windows 2000 (KB935843)
  http://www.microsoft.com/downloads/details.aspx?familyid=FB630B61-F84F -4D4C-8E6C-0A7E8210A506&displaylang=en

Microsoft Windows Server 2003 Itanium SP2

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=7BA63879-4FC7 -4A5C-B9B5-F98C5CDC6840&displaylang=en

Microsoft Windows Server 2003 Web Edition

• Microsoft Security Update for Windows Server 2003 (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=9F73A782-DEAF -46E0-B3E0-79042FF39979&displaylang=en

Microsoft Windows XP Professional x64 Edition

• Microsoft Security Update for Windows Server 2003 (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=9F73A782-DEAF -46E0-B3E0-79042FF39979&displaylang=en


• Microsoft Security Update for Windows XP x64 Edition (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=EA5E1B87-4DB5 -4B1A-891E-29C6BD6C0184&displaylang=en

Microsoft Windows Server 2003 Web Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB925902)
  http://www.microsoft.com/downloads/details.aspx?familyid=9F73A782-DEAF -46E0-B3E0-79042FF39979&displaylang=en