CVE-2008-1083
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF or WMF image file with a malformed header that triggers an integer overflow, aka "GDI Heap Overflow Vulnerability."
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://www.securityfocus.com/bid/30933
- http://www.us-cert.gov/cas/techalerts/TA08-099A.html
- http://www.osvdb.org/44213
- http://marc.info/?l=bugtraq&m=120845064910729&w=2
- http://www.vupen.com/english/advisories/2008/1145/references
- http://support.microsoft.com/kb/948590
- http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0168.html
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=681
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-021
- http://marc.info/?l=bugtraq&m=120845064910729&w=2
- http://www.osvdb.org/44214
- http://www.zerodayinitiative.com/advisories/ZDI-08-020/
- http://www.kb.cert.org/vuls/id/632963
- http://www.securityfocus.com/archive/1/490584/100/0/threaded
- https://www.exploit-db.com/exploits/5442
- https://www.exploit-db.com/exploits/6330
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41471
- http://www.securitytracker.com/id?1019798
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5441
- http://www.securityfocus.com/bid/28571
- http://secunia.com/advisories/29704
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
References
- http://www.securityfocus.com/bid/30933
- http://www.us-cert.gov/cas/techalerts/TA08-099A.html
- http://www.osvdb.org/44213
- http://marc.info/?l=bugtraq&m=120845064910729&w=2
- http://www.vupen.com/english/advisories/2008/1145/references
- http://support.microsoft.com/kb/948590
- http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0168.html
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=681
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-021
- http://marc.info/?l=bugtraq&m=120845064910729&w=2
- http://www.osvdb.org/44214
- http://www.zerodayinitiative.com/advisories/ZDI-08-020/
- http://www.kb.cert.org/vuls/id/632963
- http://www.securityfocus.com/archive/1/490584/100/0/threaded
- https://www.exploit-db.com/exploits/5442
- https://www.exploit-db.com/exploits/6330
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41471
- http://www.securitytracker.com/id?1019798
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5441
- http://www.securityfocus.com/bid/28571
- http://secunia.com/advisories/29704
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.