CVE-2009-0081 - The graphics device interface (GDI) implementation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate input received from user mode, which allows remote attackers to execute arbitrary code via a crafted (1) Windows Metafile (aka WMF) or (2) Enhanced Metafile (aka EMF) image file, aka "Windows Kernel Input Validation Vulnerability."

Back Back to CVE browser

HIGH

The graphics device interface (GDI) implementation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate input received from user mode, which allows remote attackers to execute arbitrary code via a crafted (1) Windows Metafile (aka WMF) or (2) Enhanced Metafile (aka EMF) image file, aka "Windows Kernel Input Validation Vulnerability."

Published Mar 10, 2009

9.3

HIGH

CVSS 2.0

EPSS 32.11%

Description

The graphics device interface (GDI) implementation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate input received from user mode, which allows remote attackers to execute arbitrary code via a crafted (1) Windows Metafile (aka WMF) or (2) Enhanced Metafile (aka EMF) image file, aka "Windows Kernel Input Validation Vulnerability."

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (10)

http://osvdb.org/52522
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/34117
third-party-advisoryx_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2009-079.htm
x_refsource_CONFIRM
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=842987&poid=
x_refsource_CONFIRM
http://www.securityfocus.com/bid/34012
vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1021826
vdb-entryx_refsource_SECTRACK
http://www.us-cert.gov/cas/techalerts/TA09-069A.html
third-party-advisoryx_refsource_CERTUS Government Resource
http://www.vupen.com/english/advisories/2009/0659
vdb-entryx_refsource_VUPEN
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-006
vendor-advisoryx_refsource_MS
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6202
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://osvdb.org/52522		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/34117		third-party-advisoryx_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2009-079.htm		x_refsource_CONFIRM
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=842987&poid=		x_refsource_CONFIRM
http://www.securityfocus.com/bid/34012		vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1021826		vdb-entryx_refsource_SECTRACK
http://www.us-cert.gov/cas/techalerts/TA09-069A.html		third-party-advisoryx_refsource_CERTUS Government Resource
http://www.vupen.com/english/advisories/2009/0659		vdb-entryx_refsource_VUPEN
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-006		vendor-advisoryx_refsource_MS
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6202		vdb-entrysignaturex_refsource_OVAL