Wednesday, September 10, 2008

Windows GDI+ GIF memory corruption

There is a memory corruption vulnerability in GIF file processing in Microsoft GDI+ that can be used to crash a vulnerable application and potentially execute arbitrary code.

The vulnerability

The vulnerability is caused due to improper handling of graphic control extension when processing malformed GIF files. The vulnerability can be triggered if a large number of extension markers (0x21) followed by unknown labels is found when processing a GIF file.

Impact

This vulnerability can be used to corrupt memory of any application utilizing GDI+ for GIF file decoding if it is used to open a malformed GIF file. This could lead to code execution with the privileges of the user running the vulnerable application.

References

http://www.zerodayinitiative.com/advisories/ZDI-08-056/
http://www.microsoft.com/technet/security/bulletin/ms08-052.mspx
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3013

50 comments:

Unknown said...

Thanks for sharing wonderful blog. For Embedded Training in Chennai Visit Fita Academy Embedded system Training in Chennai

aliyaa said...

If you are using shopify theme manager you can design anything without content.

Anonymous said...

Most of the parents seems to gives the greed to their child as if they do focus on their study and got some good grades then they will get them a new car or something like that of their choice.visit the website

odms said...

I like your post....Thanks for your valuable information.

, seo services in hyderabad

brninfotech said...

Thanks for posting the useful information to my vision. This is excellent information,.
iphone app training course

Softcare Infotech API Provider Company said...

your blog is very nice and the information is very useful for us.
Web design and development company

Android Mobile App Development said...

hello, Thanks for sharing this information.

We are one of the most trusted Android Mobile App Development and IOS application development
to meet your business complex requirement through the offshore world.
Do you have the project and want to discuss with us? We can assist you in Web Application Development, Mobile App development, Games Development & Emerging Technology.

trendingjobz said...

Nice blog..! I really loved reading through this article. Thanks for sharing such a amazing post with us and keep blogging...
call centre training services in hyd

Kavya said...

Generic ecplusa
Myhepall
Myhepall in Thailand
Myhepall in Romania
Myhepall in Russia
Myhepall in Italy

Jhonathan said...

I have perused your blog its appealing and noteworthy. I like it your blog.
Java application development company
Java development company
Java outsourcing company
Hire java developer
java web development services

best ppc company in india said...

I have inspected your blog its associating with and essential. I like it your blog.
ppc services in india
best ppc company in india
ppc services india
ppc advertising services
ppc services company

braincarve said...

Abacus Classes in chennai
vedic maths training chennai
abacus training classes in chennai

Anonymous said...

Lampung
Kursus
Maspion
iphoneiphone
oppo
Vivo
Axioo
lampung

Swetha K said...
This comment has been removed by the author.
Swetha K said...

This article was very helpful for my research and I learn more ideas for your excellent post. Thank you and I like you more post in the future...
Tableau Training in Chennai
Tableau Certification
Oracle DBA Training in Chennai
Linux Training in Chennai
Social Media Marketing Courses in Chennai
Corporate Training in Chennai
Spark Training in Chennai
Power BI Training in Chennai
Oracle Training in Chennai
Tableau Training in Vadapalani

lajwantidevi said...

vidmate

Anbarasan14 said...

Thanks for sharing a worthy information. This is really helpful. Keep doing more.
Air Hostess Academy in Chennai
Air Hostess Course in Chennai
Air Hostess Institute in Chennai
Air Hostess Course in Mumbai
Air Hostess Training in Mumbai
Air Hostess Institute in Mumbai
Air Hostess Training in Bangalore
Air hostess Training Institute in Bangalore
Air Hostess Course in Bangalore

Ana Horna said...

Wikindly | Trending Female Celebrities Biographies
Female Celebrities Biographies
Female Celebrities Biographies
Female Celebrities Biographies
Female Celebrities Biographies
Female Celebrities Biographies
Female Celebrities Biographies
Female Celebrities Biographies
Female Celebrities Biographies

Tim Josh said...

Thanks for sharing such great information with us. Keep on updating us with these types of blogs. Looking for a mobile app development company in India? <<----check this link.

Saimokshith said...

Very nice blog post, Thank you for sharing good information and I would request to visit our site website design company in hyderbad

Anonymous said...

Nice Comment. Thanks for sharing
mobile app development company

Bernot said...

Good post... Mobile application development company leads to meet your requirement in a short period.
digital marketing company in Chennai, digital Marketing Agency in Chennai, best SEO company in chennai, digital marketing company

Kamal S said...

Thanks of this clear and short article and it was easy to understand and very helpful. Please keep sharing more on various topics on security management. Thanks for the post!
Mobile Application Development Companies in Chennai

Mobile App Development Company in Chennai

Android Application Development Company in Dubai

iOS application development company in Dubai

Anonymous said...

Thanks for this valuable post
Top IoT app development company
shop floor management
mobile app development company

Qtree said...

Really useful information. Thank you so much for sharing.It will help everyone.Keep Post.
Best Salesforce Admin training in Coimbatore | Salesforce Admin training in Coimbatore | Best Salesforce Admin training institute in Coimbatore | Salesforce Admin Course in Coimbatore

Qtree said...

Thank You for providing us with such an insightful information through this blog.
Data Science-Alteryx Training Course in Coimbatore | Online Data Science Course in Coimbatore | Data Science Training in Coimbatore | Best Data Science Training Institute | Data Science Course in Coimbatore Online Data Science Training in Coimbatore

Devi said...

Really very nice blog information for this one and more technical skills are improve,i like that kind of post. oracle training in chennai

AWS Training In Velachery said...

Great blog with good informative content, Keep doing the great work.

Follow below link for best training centre in Velachery.
Training in velachery is one of the best training institute in Chennai which provides various modes of trainings like classroom training, online training and live training in velachery, Chennai. We provide both weekdays training and Weekend training in velachery, Chennai with flexible timing.

Android training in Velachery
Java training in Velachery
C C++ training in Velachery
Python training in Velachery
Dotnet training in Velachery
iOS training in Velachery
IoT training in Velachery
full stack Developer training in Velachery

Sam Daniel said...
This comment has been removed by the author.
Cubestech said...

WOW! Many thanks for keeping your content up to date. Your level of dedication is clearly visible through this blog!

Cheers!!

"Best mobile app development service in chennai
Best ERP software solutions in chennai
Digital Marketing Agency in Chennai
Best web development company in chennai"

bhavani inet said...

Thanks for your post, it is very useful for me .B2B app is a management app because all the management regarding all the activities of B2B is handled. Readymade B2B Android Application developer developed one of the best development Apps in India. B2B app auto manages the records and the information of the organization. B2B app development becomes a very interesting area multi-level marketing industry. It allows us to get a review of the stock details and information about the products. In any organization, it is very compulsory to regulate communication among all the employees of the company.


Readymade B2B Android Application developer
india based b2b developer

Oflox said...

If you are a youtuber, then know How To Get Sponsorship For YouTube Channel for free!

David said...

Get Best AEPS API Provider Company, justforpay India Best Aadhaar Enabled Payment System (AEPS) API Solutions Provider.You can start your own AEPS business at your small retail shop using AEPS API.

Devi said...

Are you looking for Big Data training in Chennai with placement opportunities? Then we, Infycle Technologies are with you to make your dream into reality. Infycle Technologies is one of the best Big Data Training Institute in Chennai, which offers various programs along with Big Data such as Oracle, Java, AWS, Hadoop, etc., in complete hands-on practical training with trainers, those are specialists in the field. In addition to the training, the mock interviews will be arranged for the candidates, so that they can face the interviews with the best knowledge. Of all that, 100% placement assurance will be given here. To have the words above in the real world, call 7502633633 to Infycle Technologies and grab a free demo to know moreBig Data Training in Chennai | Infycle Technologies

Manikandan said...

Good Information. Thanks For the Blog.
Mobile App Development Company in Chennai
EV App Development Company in Chennai

Architectural CAD Drafting said...

One-Stop Design Support Services for all your CAD and BIM Requirements.
Architectural CAD Drafting and BIM Modeling Outsourcing Services, Architectural Drawing Services

BIM Modeling Services

On Demand App Development Services said...

I read this blog. Very interesting!
On demand app development company

Mirror Institute for Embedded Technology said...

Thanks for your blog,,thanks for sharing this information..To know more about this visit embedded

Dextra Technologies said...

I really appreciate your post & really it is excellent. Looking to read some more posts from your blog.
wordpress development company

Diamondexch said...

Playing world777 fantasy cricket games can help you focus on something other than your negative thoughts. Concentrate on putting your cricket knowledge to good use in order to assemble the finest team possible!

bindu said...

Thanks for the sharing.

Mobile App Development Company

nidhi pethe said...

Wonderful article. It's very useful.
It looks like you have put lot of work into this.
SMARS designs jewelry to run along with your ever-changing wardrobe. A piece of Jewelry can either make or break your entire look; therefore, every unique outfit needs a different piece of jewelry to compliment it. But looking at the prices of traditional jewelry, we usually find occasions like festivals or ceremonies to buy it. And these adorable pieces spend most of their lives in the lockers. Komal, the founder of SMARS, understood this gap in the market. Every single piece is limited edition and walks hand-in-hand with trends. Adored by customers from all over the world, we ensure the quality delivery of our high-end, Indian fashion costume jewelry. Shop online for latest collection of Kundan, antique and temple jewelry in India check out necklace sets, earrings, bangles, chokers for girls and many more Indian jewelry sets for women available with free shipping across India.
Take a look: Buy Traditional Chokers For Girls Online

Anonymous said...

This site was… how do I say it? Relevant!! Finally, I have found something that helped me. how to check my bvn name and date of birth online

Anonymous said...

CronJ's react development services are engineered to build futuristic & human-centered apps at the lowest rates for better conversions and improved user retention!

mulemaster said...

//marsalgado.blogspot.com/2012/02/no-corta-fitas-minha-casa-e-e-sera.html

web designing Training in bangalore said...

Spot on with this write-up, I seriously believe that this web site needs far more attention. I’ll probably be returning to read more, thanks for the information!

https://infocampus.co.in/full-stack-development-training-in-marathahalli.html
https://infocampus.co.in/web-development-training-in-bangalore.html

Sam K. said...
This comment has been removed by the author.
Unogeeks said...


This article contains a wealth of useful information.. Oracle Fusion Financials Training

Stylon said...

Your comment is a great motivator. Thank you for that!
khussa online

syntaxminds said...

Thank you for your post. This is excellent information. It is amazing and wonderful to visit your site. Data science training in Hyderabad