HTTP: Microsoft Windows Kernel GDI32 Polyline Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the Microsoft Windows Kernel GDI32 Polyline. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the affected user.

Extended Description

Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting victim to open a malicious EMF or WMF image file. Successfully exploiting this issue will allow attackers to execute arbitrary code with kernel-level privileges, completely compromising affected computers. Failed exploit attempts will result in a denial-of-service condition.

Affected Products

Avaya messaging_application_server,Microsoft windows_server_2008_for_itanium-based_systems

References

BugTraq: 34012

CVE: CVE-2009-0081

Short Name

HTTP:STC:DL:MS-GDI32-POLYLINE

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Windows Kernel GDI32 Polyline Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?