Exploitation Summary
EIP tracks 3 public exploits for CVE-2007-1213.
AI-analyzed exploit summary This exploit targets a vulnerability in Microsoft Windows GDI (CVE-2007-1213) via a maliciously crafted .ANI file, leading to remote elevation of privilege. The exploit leverages a buffer overflow in the handling of animated cursor files to execute arbitrary code.
Description
The TrueType Fonts rasterizer in Microsoft Windows 2000 SP4 allows local users to gain privileges via crafted TrueType fonts, which result in an uninitialized function pointer.
Exploits (3)
This exploit targets a vulnerability in Microsoft Windows GDI (CVE-2007-1213) via a maliciously crafted .ANI file, leading to remote elevation of privilege. The exploit leverages a buffer overflow in the handling of animated cursor files to execute arbitrary code.
This exploit leverages a GDI local privilege escalation vulnerability (CVE-2007-1213) by manipulating a palette object's kernel pointer to execute arbitrary code in kernel mode. It targets unpatched Windows 2000/XP systems by replacing a legitimate GDI object with a malicious one, triggering execution via GetNearestPaletteIndex.
This is a functional local privilege escalation exploit for CVE-2007-1213, targeting a vulnerability in the Windows GDI component (MS07-017). It manipulates the GDI table to overwrite a win32k.sys SSDT entry, allowing arbitrary kernel code execution via a crafted payload.