Exploitation Summary
EIP tracks 3 public exploits for CVE-2007-1212.
AI-analyzed exploit summary This exploit targets a vulnerability in Microsoft Windows GDI (CVE-2007-1212) via a maliciously crafted .ANI file, leading to remote elevation of privilege. The exploit leverages a buffer overflow in the handling of animated cursor files to execute arbitrary code.
Description
Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, and SP2; and Vista allows local users to gain privileges via a crafted Enhanced Metafile (EMF) image format file.
Exploits (3)
This exploit targets a vulnerability in Microsoft Windows GDI (CVE-2007-1212) via a maliciously crafted .ANI file, leading to remote elevation of privilege. The exploit leverages a buffer overflow in the handling of animated cursor files to execute arbitrary code.
This exploit leverages a GDI local privilege escalation vulnerability (CVE-2007-1212) by manipulating a palette object's kernel pointer in shared memory to execute arbitrary code in kernel mode. It demonstrates the vulnerability by hooking the GetNearestPaletteIndex function to gain elevated privileges.
This is a functional local privilege escalation exploit for CVE-2007-1212, targeting a vulnerability in the Windows GDI subsystem (MS07-017). It manipulates the GDI table to overwrite a win32k.sys SSDT entry, allowing arbitrary kernel code execution via a crafted payload.