San WMF SetAbortProc

Scheda tecnica

Divulgata il

27 dicembre 2005

CVE

CVE-2005-4560

The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbitrary code via a Windows Metafile (WMF) format image with a crafted SETABORTPROC GDI Escape function call, related to the Windows Picture and Fax Viewer (SHIMGVW.DLL), a different vulnerability than CVE-2005-2123 and CVE-2005-2124, and as originally discovered in the wild on unionseek.com.

Fonti: cve.org · learn.microsoft.com · kb.cert.org · isc.sans.edu