MS08-021: Vulnerability in GDI could allow remote code execution

Microsoft has released security bulletin MS08-021. The security bulletin contains all the relevant information about the security update. This information includes file manifest information and deployment options. To view the complete security bulletin, visit one of the following Microsoft Web sites:

• Home users:
  http://www.microsoft.com/protect/computer/updates/bulletins/200804.mspx
  Skip the details: Download the updates for your home computer or laptop from the Microsoft Update Web site now:
  http://update.microsoft.com/microsoftupdate/
• IT professionals:
  http://www.microsoft.com/technet/security/bulletin/ms08-021.mspx

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

Known issues with this security update

• Known issue 1
  
  Symptoms
  Consider the following scenario:
  • You install the security update that is described in security bulletin MS08-025 (Kernel).
  • You install the security update that is described in security bulletin MS08-021 (GDI).
  • You uninstall the security update that is described in security bulletin MS08-025 (Kernel).
  In this scenario, the update that is described in security bulletin MS08-021 (GDI) may revert to the vulnerable version. This behavior causes the update that is described by security bulletin MS08-021 (GDI) to be reoffered to the vulnerable system. Therefore, you must reinstall the MS08-021 update.
  
  The following binaries are shared between the security updates that are described in security bulletins MS08-025 (Kernel) and MS08-021 (GDI) for the operating systems that are listed in the following table. Other operating systems are not affected by this issue.
  
  Note The following information applies to the SP1QFE branch.

  Operating system	Win32 (MS08-025)	GDI32 (MS08-021)
  x64-based versions of Windows XP Professional (SP1QFE)	Gdi32.dll Wgdi32.dll Win32k.sys	Gdi32.dll Wgdi32.dll
  32-bit versions of Windows Server 2003 (SP1QFE)	Gdi32.dll Win32k.sys	Gdi32.dll
  x64-based versions of Windows Server 2003 (SP1QFE)	Gdi32.dll Wgdi32.dll Win32k.sys	Gdi32.dll Wgdi32.dll
  Itanium-based versions of Windows Server 2003 (SP1QFE)	Gdi32.dll Wgdi32.dll Win32k.sys	Gdi32.dll Wgdi32.dll

  Resolution
  To resolve this problem, reinstall the security update that is described in security bulletin MS08-021. To install this update, visit the following Microsoft Web site:
  http://update.microsoft.com
• Known issue 2
  You may receive an error message when you install Windows XP Service Pack 3 RC1 or RC2 on a Windows XP Service Pack 2-based computer. This problem can occur if you install security update 948590 (security bulletin MS08-021) before you install Windows XP SP3 RC2 or RC1. For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base:
  952829 Error message when you install Windows XP Service Pack 3 RC1 or RC2 on a Windows XP Service Pack 2-based computer: "STOP: 0xc0000139 {Entry Point Not Found}"

File information

The English (United States) version of this software update has the file attributes that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information on your local computer, the dates and times for these files are listed in your local time. These dates and times may also change when you perform certain operations on the files.

For all supported editions of Microsoft Windows 2000 Service Pack 4

For all supported 32-bit editions of Windows XP

For all supported x64-based editions of Windows XP Professional

For all supported 32-bit versions of Windows Server 2003

For all supported x64-based versions of Windows Server 2003

For all supported Itanium-based versions of Windows Server 2003

For all supported 32-bit editions of Windows Vista

Windows Vista and Windows Server 2008 file information

• Service Pack 1 is integrated into Windows Server 2008. Therefore, RTM milestone files only apply to Windows Vista. For example, RTM milestone files have a 6.0.0000.xxxxxx version number. GDR service branches contain only fixes that are broadly released to address widespread, critical issues. LDR service branches contain hotfixes in addition to broadly released fixes.
• The files that apply to a specific product, milestone (RTM, SPn) and service branch (LDR, GDR) can be identified by examining the file version numbers as displayed in the following table:

  File version number	Product	Milestone	Service branch
  6.0.6000.16xxx	Windows Vista	RTM	GDR
  6.0.6000.20xxx	Windows Vista	RTM	LDR
  6.0.6001.18xxx	Windows Vista SP1 and Windows Server 2008 SP1	SP1	GDR
  6.0.6001.22xxx	Windows Vista SP1 and Windows Server 2008 SP1	SP1	LDR

For all supported x64-based editions of Windows Vista

For all supported 32-bit editions of Windows Server 2008

For all supported x64-based editions of Windows Server 2008

For all supported Itanium-based editions of Windows Server 2008