CVE-2008-3465: Buffer Overflow
Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows context-dependent attackers to cause a denial of service or execute arbitrary code via a WMF file with a malformed file-size parameter, which would not be properly handled by a third-party application that uses this API for a copy operation, aka "GDI Heap Overflow Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3465?
CVE-2008-3465 is classified as a high severity vulnerability that can lead to denial of service or arbitrary code execution.
How do I fix CVE-2008-3465?
To fix CVE-2008-3465, apply the latest security patches released by Microsoft for the affected Windows versions.
Which versions of Windows are affected by CVE-2008-3465?
CVE-2008-3465 affects Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008.
What type of attack is possible using CVE-2008-3465?
CVE-2008-3465 allows context-dependent attackers to execute arbitrary code or cause a denial of service through specially crafted WMF files.
Is there a known exploit for CVE-2008-3465?
Yes, there are known exploits for CVE-2008-3465 that can leverage the buffer overflow to compromise affected systems.