CVE-2008-3014

Related Files

HP Security Bulletin 2008-01.33

Posted Sep 25, 2008

Authored by Hewlett Packard | Site hp.com

HP Security Bulletin - Various potential security vulnerabilities have been identified in Microsoft software that is running on the Storage Management Appliance (SMA). Some of these vulnerabilities may be pertinent to the SMA, please check the table in the Resolution section of this Security Bulletin.

tags | advisory, vulnerability

advisories | CVE-2007-5348, CVE-2008-3012, CVE-2008-3013, CVE-2008-3014, CVE-2008-3015, CVE-2008-3008, CVE-2008-2253, CVE-2008-3007

SHA-256 | 2d62df60bfdb5fe20819e015d7ce648ee2230bddc88fc5eaf0e32ff2cfccb707

Download | Favorite | View

CVE-2008-3014.pdf

Posted Sep 11, 2008

Site secunia.com

Deep analysis of the integer overflow in Microsoft GDI+ that can occur during the processing of PolyPolygon records in WMF files.

tags | paper, overflow

advisories | CVE-2008-3014

SHA-256 | 7a9b40b846c927ee326e5b2b5de32049d98d127571d293ef63109d59bb828c00

Download | Favorite | View

mswin-wmf.txt

Posted Sep 10, 2008

Site assurent.com

A vulnerability has been discovered in the Graphics Rendering Engine (GRE) component of Microsoft Windows. Specifically this vulnerability is exposed by the Microsoft Windows GDI+ subsystem. The vulnerability is created by an error in parsing certain Windows Metafile (WMF) files, a standard image file format used by many commonly-used software applications. . A successful code execution attempt will result in arbitrary code to be executed within the security privileges of the currently logged in user. An unsuccessful attack attempt will result in abnormal termination of the program used for opening the malicious file.

tags | advisory, arbitrary, code execution

systems | windows

advisories | CVE-2008-3014

SHA-256 | 9b6c1b0b5a4674f7675b402b16aa2e22199f06c41ee19046873a161c464b9347

Download | Favorite | View