Published: 08/04/2008 Updated: 07/12/2023

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 945

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Subscribe to Windows Server 2008

Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote malicious users to execute arbitrary code via an EMF or WMF image file with a malformed header that triggers an integer overflow, aka "GDI Heap Overflow Vulnerability."

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft windows server 2008 -
microsoft windows 2003 server
microsoft windows xp
microsoft windows vista
microsoft windows 2000
microsoft windows vista -

///////////////////////////////////////////////////////////// ///Exploit the MS08-021 : Stack Overflow on GDI API ///Author: Lamhtz ///Date: April 14th, 2008 ///Usage: <appnameexe> [filename] ///Function: Generate a crafted emf file which could /// automatically run calcexe in Win2kSP4 CHS Version /// with MS07-046 patched but ...

CreateDIBPatternBrushPt Heap Overflow DOS By Ac!dDrop This was tested on Windows XP Sp2 GDI32dll 5126003099 Internet explorer 6029002180 ------ Causes Explorerexe to crash and causes Internet explorer to close silently ------ This is work in progress , i am still trying to make it run arbitary code githubcom/offensiv ...

EMR_COLORMATCHTOTARGETW stack buffer overflow exploit By Ac!dDrop This is one of the 2 Vulnerabilities of MS08-021 Tested on Windows xp professional SP1 GDi32dll 5126001106 kernel32dll 5126001106 ws2_32dll 5126000 calczip---> executes calculator IEzip and localhostzip ------> connects at localhost at port 230 On Wind ...

CWE-119 http://www.securityfocus.com/bid/28571 http://www.securitytracker.com/id?1019798 http://secunia.com/advisories/29704 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=681 http://www.us-cert.gov/cas/techalerts/TA08-099A.html http://www.kb.cert.org/vuls/id/632963 http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0168.html http://www.zerodayinitiative.com/advisories/ZDI-08-020/http://www.osvdb.org/44213 http://www.osvdb.org/44214 http://www.securityfocus.com/bid/30933 http://support.microsoft.com/kb/948590 http://marc.info/?l=bugtraq&m=120845064910729&w=2 http://www.vupen.com/english/advisories/2008/1145/references https://exchange.xforce.ibmcloud.com/vulnerabilities/41471 https://www.exploit-db.com/exploits/6330 https://www.exploit-db.com/exploits/5442 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5441 http://www.securityfocus.com/archive/1/490584/100/0/threaded https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-021 https://nvd.nist.gov https://www.exploit-db.com/exploits/5442/https://www.kb.cert.org/vuls/id/632963

CVE-2008-1083

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect