New WMF exploits have been posted to the web.
Microsoft Windows Graphics Rendering Engine Multiple Memory Corruption Vulnerabilities
See here and here.
QUOTE: Microsoft Windows WMF graphics rendering engine is affected by multiple memory corruption vulnerabilities. These issues affect the 'ExtCreateRegion' and 'ExtEscape' functions. These problems present themselves when a user views a malicious WMF formatted file containing specially crafted data. Reports indicate that these issues lead to a denial of service condition, however, it is conjectured that arbitrary code execution is possible as well. Any code execution that occurs will be with the privileges of the user viewing a malicious image.
An attacker may gain SYSTEM privileges if an administrator views the malicious file.
Posted by Roger Grimes on January 9, 2006 11:28 AM
