Open Vulnerability and Assessment Language (OVAL)
Offical Language Release Repository Downloads News — November 5, 2009 Search
link to OVAL home page

View Definition

Definition Id: oval:org.mitre.oval:def:1433 Date: 2009-05-07
Title: WinXP,SP2 Graphics Rendering Engine Vulnerability
Description: The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbitrary code via a Windows Metafile (WMF) format image with a crafted SETABORTPROC GDI Escape function call, related to the Windows Picture and Fax Viewer (SHIMGVW.DLL), a different vulnerability than CVE-2005-2123 and CVE-2005-2124, and as originally discovered in the wild on unionseek.com.
Version: 2 Class: vulnerability
Status: ACCEPTED Reference(s): CVE-2005-4560
Family: windows
Platform(s): Microsoft Windows XP Product(s): Operating System
Definition Synopsis: