header-logo
Suggest Exploit
vendor:
Windows XP
by:
Ac!dDrop
7.5
CVSS
HIGH
Heap Overflow
119
CWE
Product Name: Windows XP
Affected Version From: Windows XP Sp2
Affected Version To: Internet explorer 6.0.2900.2180
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2008

CreateDIBPatternBrushPt Heap Overflow DOS

This vulnerability causes Explorer.exe to crash and causes Internet explorer to close silently. It is a work in progress and the author is still trying to make it run arbitrary code.

Mitigation:

Ensure that all software is up to date and patched with the latest security updates.
Source

Exploit-DB raw data:

CreateDIBPatternBrushPt Heap Overflow DOS
By Ac!dDrop



This was tested on


Windows XP Sp2
GDI32.dll 5.1.2600.3099
Internet explorer 6.0.2900.2180



------
Causes Explorer.exe to crash.
and causes Internet explorer to close silently.

------

This is work in progress , i am still trying to make it run arbitary code.


https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/6330.rar (2008-EMF_DOS.rar)

# milw0rm.com [2008-08-29]