CVE-2008-1087

CRITICAL 9.3CVE-2008-1087 · Published 08/04/2008 · updated 16/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF image file with crafted filename parameters, aka "GDI Stack Overflow Vulnerability."

References

marc.info · Mailing List
secunia.com/advisories/29704 · Vendor Advisory
osvdb.org/44215 · Broken Link
securityfocus.com/bid/28570 · Patch
securitytracker.com/id · Third Party Advisory
us-cert.gov/cas/techalerts/TA08-099A.html · Third Party Advisory
vupen.com/english/advisories/2008/1145/references · Broken Link
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-021
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5580
exploit-db.com/exploits/5442
exploit-db.com/exploits/6656

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free