Published: 22/12/2010 Updated: 07/12/2023

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 935

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Stack-based buffer overflow in the CreateSizedDIBSECTION function in shimgvw.dll in the Windows Shell graphics processor (aka graphics rendering engine) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 allows remote malicious users to execute arbitrary code via a crafted .MIC or unspecified Office document containing a thumbnail bitmap with a negative biClrUsed value, as reported by Moti and Xu Hao, aka "Windows Shell Graphics Processing Overrun Vulnerability."

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft windows server 2008
microsoft windows server 2008 -
microsoft windows xp -
microsoft windows xp
microsoft windows vista
microsoft windows server 2003

## # $Id: ms11_006_createsizeddibsectionrb 11730 2011-02-08 23:31:44Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'm ...

CWE-119 http://www.powerofcommunity.net/speaker.html http://www.securityfocus.com/bid/45662 http://www.metasploit.com/redmine/projects/framework/repository/revisions/11466/entry/modules/exploits/windows/fileformat/ms11_xxx_createsizeddibsection.rb http://secunia.com/advisories/42779 http://www.kb.cert.org/vuls/id/106516 http://www.vupen.com/english/advisories/2011/0018 http://www.microsoft.com/technet/security/advisory/2490606.mspx http://www.securitytracker.com/id?1024932 http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11671 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-006 https://nvd.nist.gov https://www.exploit-db.com/exploits/16660/https://www.kb.cert.org/vuls/id/106516

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2010-3970

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect