|
|
>> Microsoft Windows CE Image Handling Code Execution Vulnerabilities
|
Title : Microsoft Windows CE Image Handling Code Execution Vulnerabilities
VUPEN ID : VUPEN/ADV-2008-1469
CVE ID : CVE-2008-2160
Rated as : Critical 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2008-05-13
|
Multiple vulnerabilities have been identified in Microsoft Windows CE, which could be exploited by attackers to take complete control of an affected device. These issues are caused by unspecified errors when processing malformed JPEG (GDI+) and GIF images, which could be exploited by attackers to execute arbitrary code by trkcing a user into opening a specially crafted image.
Affected Products
Microsoft Windows CE version 5.0
Solution
Apply Windows CE 5.0 Platform Builder Monthly Update (February 2008).
References
http://www.vupen.com/english/advisories/2008/1469
http://support.microsoft.com/kb/948812/en-us
Credits
Vulnerability reported by the vendor.
ChangeLog
2008-05-13 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
