MS.GDI.WMF.META.DIB.Heap.Overflow

Release Date Dec 12, 2008
Severity critical
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attempt to exploit a buffer-overflow vulnerability in Microsoft Windows GDI. The vulnerability is caused by an error when the vulnerable software handles a malicious WMF file with some malformed records. A remote attacker may exploit this to execute arbitrary code.
Affected Products Microsoft Windows 2000 Service Pack 4 Windows XP Service Pack 2 Windows XP Service Pack 3 Windows XP Professional x64 Edition and Windows XP Professional x64 Edition Service Pack 2 Windows Server 2003 Service Pack 1 and Windows Server 2003 Service Pack 2 Windows Server 2003 x64 Edition and Windows Server 2003 x64 Edition Service Pack 2 Windows Server 2003 with SP1 for Itanium-based Systems and Windows Server 2003 with SP2 for Itanium-based Systems Windows Vista and Windows Vista Service Pack 1 Windows Vista x64 Edition and Windows Vista x64 Edition Service Pack 1 Windows Server 2008 for 32-bit Systems Windows Server 2008 for x64-based Systems Windows Server 2008 for Itanium-based Systems
Recommended Actions Refer to the vendor's web site for the suggested workaround: http://www.microsoft.com/technet/security/Bulletin/ms08-071.mspx
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2008-2249
Reference/s http://technet.microsoft.com/en-us/security/bulletin/ms08-071.mspx (MS-ID) http://www.securityfocus.com/bid/32634 (BugTraq)

Fortinet