Secunia

Some vulnerabilities have been reported in Microsoft Windows, which can be exploited by malicious people to potentially compromise a vulnerable system.

1) An integer overflow error in GDI when processing headers in Windows Metafile (WMF) files can be exploited to cause a buffer overflow via a specially crafted WMF file.

2) An error exists in the the way the GDI handles file size parameters in WMF files. This can be exploited to cause a heap-based buffer overflow via a specially crafted WMF file.

Successful exploitation of these vulnerabilities may allow execution of arbitrary code.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
1) The vendor credits Jun Mao, VeriSign iDefense Labs.
2) The vendor credits Juan Caballero.

Changelog
Further details available in Customer Area

Original Advisory
MS08-071 (KB956802):
http://www.microsoft.com/technet/security/Bulletin/MS08-071.mspx

iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=762

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area