Stack-based Buffer Overflow in Microsoft Windows GDI

CVE-2008-1087

What is CVE-2008-1087?

A stack-based buffer overflow vulnerability exists in the Graphics Device Interface (GDI) of multiple Microsoft Windows operating systems. This flaw can be exploited through specially crafted EMF image files with malicious filename parameters, enabling remote attackers to execute arbitrary code on the target system. Systems vulnerable to this attack include Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008.

References