Published: 08/04/2008 Updated: 21/11/2024

Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote malicious users to execute arbitrary code via an EMF image file with crafted filename parameters, aka "GDI Stack Overflow Vulnerability."

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft windows-nt 2008
microsoft windows 2000
microsoft windows 2003 server
microsoft windows vista
microsoft windows xp

///////////////////////////////////////////////////////////// ///Exploit the MS08-021 : Stack Overflow on GDI API ///Author: Lamhtz ///Date: April 14th, 2008 ///Usage: <appnameexe> [filename] ///Function: Generate a crafted emf file which could /// automatically run calcexe in Win2kSP4 CHS Version /// with MS07-046 patched but ...

EMR_COLORMATCHTOTARGETW stack buffer overflow exploit By Ac!dDrop This is one of the 2 Vulnerabilities of MS08-021 Tested on Windows xp professional SP1 GDi32dll 5126001106 kernel32dll 5126001106 ws2_32dll 5126000 calczip---> executes calculator IEzip and localhostzip ------> connects at localhost at port 230 On Wind ...

CWE-119 https://nvd.nist.gov https://www.exploit-db.com/exploits/5442/https://www.first.org/epss http://marc.info/?l=bugtraq&m=120845064910729&w=2 http://marc.info/?l=bugtraq&m=120845064910729&w=2 http://secunia.com/advisories/29704 http://www.osvdb.org/44215 http://www.securityfocus.com/bid/28570 http://www.securitytracker.com/id?1019798 http://www.us-cert.gov/cas/techalerts/TA08-099A.html http://www.vupen.com/english/advisories/2008/1145/references https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-021 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5580 https://www.exploit-db.com/exploits/5442 https://www.exploit-db.com/exploits/6656 http://marc.info/?l=bugtraq&m=120845064910729&w=2 http://marc.info/?l=bugtraq&m=120845064910729&w=2 http://secunia.com/advisories/29704 http://www.osvdb.org/44215 http://www.securityfocus.com/bid/28570 http://www.securitytracker.com/id?1019798 http://www.us-cert.gov/cas/techalerts/TA08-099A.html http://www.vupen.com/english/advisories/2008/1145/references https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-021 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5580 https://www.exploit-db.com/exploits/5442 https://www.exploit-db.com/exploits/6656

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-1087

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect