Oval Definition:oval:org.mitre.oval:def:701
Revision Date:2011-05-16Version:46
Title:WMF Rendering Code Execution Vulnerability (64-bit Windows XP and Server 2003,SP1)
Description:Multiple integer overflows in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allow remote attackers to execute arbitrary code via crafted Windows Metafile (WMF) and Enhanced Metafile (EMF) format images that lead to heap-based buffer overflows, as demonstrated using MRBP16::bCheckRecord.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2005-2123
Platform(s):Microsoft Windows Server 2003
Microsoft Windows XP
Product(s):
Definition Synopsis
  • 64-bit XP or Server 2003 is installed
  • 64-bit XP is installed
  • Windows XP is installed
  • AND 64-Bit (x64 architecture) version of Windows is installed
  • OR Windows Server 2003 is installed
  • AND Win2K/XP/2003/Vista service pack 1 is installed
  • AND the version of Gdi32.dll is less than 5.2.3790.2542
  • BACK