9.3
CVSSv2

CVE-2008-2249

Published: 10/12/2008 Updated: 07/12/2023
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Integer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote malicious users to execute arbitrary code via a malformed header in a crafted WMF file, which triggers a buffer overflow, aka "GDI Integer Overflow Vulnerability."

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft windows vista gold

microsoft windows 2003 server

microsoft windows xp

microsoft windows 2000

microsoft windows server 2003

microsoft windows server 2008

microsoft windows vista