eEye Security Advisory – eEye Digital Security has discovered a heap overflow vulnerability in the way the Windows Graphical Device Interface (GDI) processes Windows enhanced metafile images (file extensions EMF and WMF). An attacker could send a malicious metafile to a victim of his choice over any of a variety of media — such as HTML e-mail, a link to a web page, a metafile-bearing Microsoft Office document, or a chat message — in order to execute code on that user’s system at the user’s privilege level.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/41409/EEYEB-20050329.txt
Source: https://packetstormsecurity.com/files/41409/EEYEB-20050329.txt.html