CVE-2009-1217: Integer Overflow
Published Apr 1, 2009
·Updated
Off-by-one error in the GpFont::SetData function in gdiplus.dll in Microsoft GDI+ on Windows XP allows remote attackers to cause a denial of service (stack corruption and application termination) via a crafted EMF file that triggers an integer overflow, as demonstrated by voltage-exploit.emf, aka the "Microsoft GdiPlus EMF GpFont.SetData integer overflow."
Affected Software
4 affected components
Microsoft Gdi\+
Microsoft Windows XP
All of the following
Microsoft Gdi\+
Microsoft Windows XP
Event History
Apr 1, 2009
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
06:00 PM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·06:00 PM
DescriptionSeverityWeaknessAffected Software