Vulnerabilities in GDI Allows Code Execution (MS08-021)

[newsbot]

This security update resolves two privately reported vulnerabilities in GDI. Exploitation of either of these vulnerabilities could allow remote code execution if a user opens a specially crafted EMF or WMF image file. An attacker who successfully exploited these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

http://www.securiteam.com/windowsntfocus/5RP042KO0K.html