Microsoft Windows - GDI Image Parsing Stack Overflow (MS08-021)

Author: Lamhtz
type: local
platform: windows
port: 
date_added: 2008-04-13 
date_updated:  
verified: 1 
codes: OSVDB-44215;CVE-2008-1087;OSVDB-44213;CVE-2008-1083;MS08-021 
tags: 
aliases: 2008-exploit_08021.zip 
screenshot_url:  
application_url: 

/////////////////////////////////////////////////////////////
///Exploit the MS08-021 : Stack Overflow on GDI API
///Author: Lamhtz
///Date: April 14th, 2008
///Usage: <appname.exe> [filename]
///Function: Generate a crafted emf file which could
///          automatically run calc.exe in Win2kSP4 CHS Version
///			 with MS07-046 patched but no MS08-021 is installed.
///			 In Windows XP SP2, explorer.exe will crashed but
///          calc will not be run.
/////////////////////////////////////////////////////////////

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/5442.zip (2008-exploit_08021.zip)

// milw0rm.com [2008-04-14]