Description: This security update resolves two privately reported vulnerabilities in GDI. Exploitation of either of these vulnerabilities could allow remote code execution if a user opens a specially crafted EMF or WMF image file. An attacker who successfully exploited these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

Update type: Critical

Release date: April 8, 2008

Applies to: All

Knowledge base: support.microsoft.com/kb/948590

Download link: 32-bit | 64-bit

Comments: Here are the specifics on the vulnerabilities covered by this update:

• GDI Heap Overflow Vulnerability - CVE-2008-1083
• GDI Stack Overflow Vulnerability - CVE-2008-1087