PT-2011-2038 · Microsoft · Windows Vista+5

Chaouki Bekrar + 1 · Published 2011-04-13 · Updated 2023-12-07 · CVE-2011-0041

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through SP2 Microsoft Office version XP SP3

Description The issue is related to an integer overflow in gdiplus.dll, which is part of GDI+ in Microsoft Windows and Office. This allows remote attackers to execute arbitrary code via a crafted EMF image. The vulnerability could be exploited if a user opens a specially crafted EMF image file, potentially allowing an attacker to take complete control of an affected system. This could enable the attacker to install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights on the system might be less impacted than those operating with administrative user rights.

Recommendations For Microsoft Windows XP versions SP2 through SP3, apply the recommended patch to fix the integer overflow vulnerability in gdiplus.dll. For Microsoft Windows Server 2003 version SP2, apply the recommended patch to fix the integer overflow vulnerability in gdiplus.dll. For Microsoft Windows Vista versions SP1 through SP2, apply the recommended patch to fix the integer overflow vulnerability in gdiplus.dll. For Microsoft Windows Server 2008 versions Gold through SP2, apply the recommended patch to fix the integer overflow vulnerability in gdiplus.dll. For Microsoft Office version XP SP3, apply the recommended patch to fix the integer overflow vulnerability in gdiplus.dll.

Exploit

Fix

RCE

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2011-0041

Affected Products

Office

Windows

Windows Server 2003

Windows Server 2008

Windows Vista

Windows Xp

References · 7

• 🔥 https://exploit-db.com/exploits/17544 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-029 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0041 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-0041 · Security Note
• http://us-cert.gov/cas/techalerts/TA11-102A.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11854 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2011/MS11-029 · Note