CVE-2007-1211
Microsoft Windows 2000 SP4, XP SP2, Server 2003 Gold/SP1/SP2 - Denial of Service via Crafted WMF Image
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2007-1211.
AI-analyzed exploit summary The provided entry is a placeholder with no actual exploit code, only a link to an external download. This is characteristic of suspicious repositories that lure researchers into downloading potentially malicious files.
Description
Unspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1, and SP2 allows user-assisted remote attackers to cause a denial of service (possibly persistent restart) via a crafted Windows Metafile (WMF) image that causes an invalid dereference of an offset in a kernel structure, a related issue to CVE-2005-4560.
Exploits (3)
The provided entry is a placeholder with no actual exploit code, only a link to an external download. This is characteristic of suspicious repositories that lure researchers into downloading potentially malicious files.
This exploit leverages a GDI local privilege escalation vulnerability (CVE-2007-1211) by manipulating a palette object's kernel pointer in shared memory, allowing arbitrary code execution in kernel mode. The PoC demonstrates the attack by hooking the GetNearestPaletteIndex function and executing a CLI/STI instruction sequence.
This exploit demonstrates a local privilege escalation (LPE) vulnerability in Windows GDI (CVE-2007-1211) by manipulating the GDI table to overwrite a win32k.sys SSDT entry, allowing arbitrary code execution in kernel mode. The PoC allocates memory at address 0x2, copies a payload, and triggers the vulnerability via DeleteObject.