{"id":"CVE-2008-1083","aliases":["EUVD-2008-1094","GHSA-8pgm-3m7v-29vc"],"status":"published","title":"Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows...","description":"Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF or WMF image file with a malformed header that triggers an integer overflow, aka \"GDI Heap Overflow Vulnerability.\"","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.56979,"percentile":0.99074,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119","CWE-190"],"published":"2008-04-08T23:00:00Z","modified":"2026-06-16T22:50:57Z","exploits":[{"source":"exploitdb","id":"EDB-5442","title":"Microsoft Windows - GDI Image Parsing Stack Overflow (MS08-021)","type":"local","platform":"windows","date":"2008-04-14","verified":true,"url":"https://www.exploit-db.com/exploits/5442"},{"source":"exploitdb","id":"EDB-6330","title":"Microsoft Windows - GDI (CreateDIBPatternBrushPt) Heap Overflow (PoC)","type":"dos","platform":"windows","date":"2008-08-29","verified":true,"url":"https://www.exploit-db.com/exploits/6330"},{"source":"exploitdb","id":"EDB-6656","title":"Microsoft Windows - GDI (EMR_COLORMATCHTOTARGETW) (MS08-021)","type":"remote","platform":"windows","date":"2008-10-02","verified":true,"url":"https://www.exploit-db.com/exploits/6656"}],"products":[{"vendor":"microsoft","product":"windows_2000"},{"vendor":"microsoft","product":"windows_2003_server"},{"vendor":"microsoft","product":"windows_server_2008"},{"vendor":"microsoft","product":"windows_vista"},{"vendor":"microsoft","product":"windows_xp"}],"references":[{"url":"http://www.securityfocus.com/bid/30933","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-099A.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","US Government Resource"]},{"url":"http://www.osvdb.org/44213","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","Broken Link"]},{"url":"http://marc.info/?l=bugtraq\u0026m=120845064910729\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","Mailing List"]},{"url":"http://www.vupen.com/english/advisories/2008/1145/references","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Broken Link"]},{"url":"http://support.microsoft.com/kb/948590","tags":["vendor-advisory","x_refsource_MSKB","x_transferred","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0168.html","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Broken Link"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=681","tags":["third-party-advisory","x_refsource_IDEFENSE","x_transferred","Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-021","tags":["vendor-advisory","x_refsource_MS","x_transferred"]},{"url":"http://www.osvdb.org/44214","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","Broken Link"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-020/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/632963","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/490584/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://www.exploit-db.com/exploits/5442","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"https://www.exploit-db.com/exploits/6330","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41471","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securitytracker.com/id?1019798","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5441","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.securityfocus.com/bid/28571","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/29704","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-1083"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-020"},{"url":"https://github.com/advisories/GHSA-8pgm-3m7v-29vc"}],"sources":{"cve":[{"id":"CVE-2008-1083","description":"Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF or WMF image file with a malformed header that triggers an integer overflow, aka \"GDI Heap Overflow Vulnerability.\"","status":"published","published":"2008-04-08T23:00:00Z","modified":"2024-10-15T14:22:20.263Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:34:47.71012Z"}],"euvd":[{"id":"EUVD-2008-1094","description":"Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF or WMF image file with a malformed header that triggers an integer overflow, aka \"GDI Heap Overflow Vulnerability.\"","status":"published","published":"2008-04-08T23:00:00Z","modified":"2024-10-15T14:22:20Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:27:37.250145Z"}],"ghsa":[{"id":"GHSA-8pgm-3m7v-29vc","title":"Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows...","description":"Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF or WMF image file with a malformed header that triggers an integer overflow, aka \"GDI Heap Overflow Vulnerability.\"","status":"published","published":"2022-05-01T23:36:26Z","modified":"2024-10-15T18:31:56Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119","CWE-190"],"updated_at":"2026-11-02T14:58:30.303503Z"}],"nvd":[{"id":"CVE-2008-1083","description":"Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF or WMF image file with a malformed header that triggers an integer overflow, aka \"GDI Heap Overflow Vulnerability.\"","status":"published","published":"2008-04-08T23:05:00Z","modified":"2026-06-16T22:50:57.07Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119","CWE-190"],"updated_at":"2026-11-02T14:01:25.857543Z"}]}}