Microsoft GdiPlus - EMF GpFont.SetData Integer Overflow (PoC)



EKU-ID: 16097 CVE: OSVDB-54700;CVE-2009-1217 OSVDB-ID:
Author: Black Security Published: 2009-03-24 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


Microsoft GdiPlus.dll EMF GpFont::SetData Stack Overflow

Write up by redsand@blacksecurity.org : http://bl4cksecurity.blogspot.com/2009/03/microsoft-gdiplus-emf-gpfontsetdata.html
Credits to mIKEJONES for providing the .EMF Crash

down: http://www.blacksecurity.org/voltage-exploit.emf
back: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/8281.emf (2009-voltage-exploit.emf)

# milw0rm.com [2009-03-24]