NVD

Id
48505  
Name
CVE-2009-1217  
Description
Off-by-one error in the GpFont::SetData function in gdiplus.dll in Microsoft GDI+ on Windows XP allows remote attackers to cause a denial of service (stack corruption and application termination) via a crafted EMF file that triggers an integer overflow, as demonstrated by voltage-exploit.emf, aka the "Microsoft GdiPlus EMF GpFont.SetData integer overflow."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2009-04-01  
Modified Date
2009-04-16  
Seq
2009-1217  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
244537 48505 CVE-2009-1217 http://bl4cksecurity.blogspot.com/2009/03/microsoft-gdiplus-emf-gpfontsetdata.html  View
244538 48505 CVE-2009-1217 http://blogs.technet.com/srd/archive/2009/03/26/new-emf-gdiplus-dll-crash-not-exploitable-for-code-execution.aspx  View
244539 48505 CVE-2009-1217 34250  View
244540 48505 CVE-2009-1217 ADV-2009-0832  View
244541 48505 CVE-2009-1217 win-gdi-emfplusfont-dos(49438)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40517 JVNDB-2009-001523 Windows XP の Microsoft GDI+ に含まれる gdiplus.dll の GpFont::SetData 関数における Off-by-one エラーの脆弱性 Windows XP の Microsoft GDI+ に含まれる gdiplus.dll の GpFont::SetData 関数には Off-by-one エラーの脆弱性が存在します。 CVE-2009-1217 38648 CVE-2009-1217 48505 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001523.html 2009-04-01 2009-06-30 View