header-logo
Suggest Exploit
vendor:
Windows XP
by:
Lamhtz
9.3
CVSS
HIGH
Stack Overflow
119
CWE
Product Name: Windows XP
Affected Version From: Win2kSP4 CHS Version with MS07-046 patched
Affected Version To: Windows XP SP2
Patch Exists: YES
Related CWE: CVE-2008-0926
CPE: o:microsoft:windows_xp::sp2
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2008

Exploit the MS08-021 : Stack Overflow on GDI API

This exploit generates a crafted emf file which could automatically run calc.exe in Win2kSP4 CHS Version with MS07-046 patched but no MS08-021 is installed. In Windows XP SP2, explorer.exe will crashed but calc will not be run.

Mitigation:

Install the MS08-021 patch
Source

Exploit-DB raw data:

/////////////////////////////////////////////////////////////
///Exploit the MS08-021 : Stack Overflow on GDI API
///Author: Lamhtz
///Date: April 14th, 2008
///Usage: <appname.exe> [filename]
///Function: Generate a crafted emf file which could 
///          automatically run calc.exe in Win2kSP4 CHS Version
///			 with MS07-046 patched but no MS08-021 is installed.
///			 In Windows XP SP2, explorer.exe will crashed but
///          calc will not be run.
/////////////////////////////////////////////////////////////

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/5442.zip (2008-exploit_08021.zip)

// milw0rm.com [2008-04-14]

Navigation

Suggest Exploit

Services By CQR