Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-1217. PoCs published by Black Security.
AI-analyzed exploit summary This is a writeup describing a stack overflow vulnerability in Microsoft GdiPlus.dll's EMF GpFont::SetData function. It references an external EMF file that triggers the crash but does not contain exploit code itself.
Description
Off-by-one error in the GpFont::SetData function in gdiplus.dll in Microsoft GDI+ on Windows XP allows remote attackers to cause a denial of service (stack corruption and application termination) via a crafted EMF file that triggers an integer overflow, as demonstrated by voltage-exploit.emf, aka the "Microsoft GdiPlus EMF GpFont.SetData integer overflow."
Exploits (1)
This is a writeup describing a stack overflow vulnerability in Microsoft GdiPlus.dll's EMF GpFont::SetData function. It references an external EMF file that triggers the crash but does not contain exploit code itself.