CVE-2009-1217: Integer Overflow
Off-by-one error in the GpFont::SetData function in gdiplus.dll in Microsoft GDI+ on Windows XP allows remote attackers to cause a denial of service (stack corruption and application termination) via a crafted EMF file that triggers an integer overflow, as demonstrated by voltage-exploit.emf, aka the "Microsoft GdiPlus EMF GpFont.SetData integer overflow."
Affected Software
Event History
Frequently Asked Questions
Which systems are affected?
The issue is identified in Microsoft GDI+ on Windows XP, specifically in gdiplus.dll. The provided data does not identify other Windows versions as affected.
What does an attacker need to do to trigger the issue?
An attacker must supply a crafted EMF file that reaches the GpFont::SetData function. Exploitation is remote and requires no authentication according to the provided vector.
What is the expected impact?
The documented impact is denial of service through stack corruption and application termination. The referenced issue is described as not exploitable for code execution.