MS08-021: Vulnerability in GDI could allow remote code execution

Known issues with this security update

• Known issue 1
  
  Symptoms
  Consider the following scenario:
  • You install the security update that is described in security bulletin MS08-025 (Kernel).
  • You install the security update that is described in security bulletin MS08-021 (GDI).
  • You uninstall the security update that is described in security bulletin MS08-025 (Kernel).
  In this scenario, the update that is described in security bulletin MS08-021 (GDI) may revert to the vulnerable version. This behavior causes the update that is described by security bulletin MS08-021 (GDI) to be reoffered to the vulnerable system. Therefore, you must reinstall the MS08-021 update.
  
  The following binaries are shared between the security updates that are described in security bulletins MS08-025 (Kernel) and MS08-021 (GDI) for the operating systems that are listed in the following table. Other operating systems are not affected by this issue.
  
  Note The following information applies to the SP1QFE branch.
  Collapse this tableExpand this table

  Operating system	Win32 (MS08-025)	GDI32 (MS08-021)
  x64-based versions of Windows XP Professional (SP1QFE)	Gdi32.dll Wgdi32.dll Win32k.sys	Gdi32.dll Wgdi32.dll
  32-bit versions of Windows Server 2003 (SP1QFE)	Gdi32.dll Win32k.sys	Gdi32.dll
  x64-based versions of Windows Server 2003 (SP1QFE)	Gdi32.dll Wgdi32.dll Win32k.sys	Gdi32.dll Wgdi32.dll
  Itanium-based versions of Windows Server 2003 (SP1QFE)	Gdi32.dll Wgdi32.dll Win32k.sys	Gdi32.dll Wgdi32.dll

  Resolution
  To resolve this problem, reinstall the security update that is described in security bulletin MS08-021. To install this update, visit the following Microsoft Web site:
  http://update.microsoft.com

  (http://update.microsoft.com)
• Known issue 2
  You may receive an error message when you install Windows XP Service Pack 3 RC1 or RC2 on a Windows XP Service Pack 2-based computer. This problem can occur if you install security update 948590 (security bulletin MS08-021) before you install Windows XP SP3 RC2 or RC1. For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base:
  952829

  (http://support.microsoft.com/kb/952829/ )

  Error message when you install Windows XP Service Pack 3 RC1 or RC2 on a Windows XP Service Pack 2-based computer: "STOP: 0xc0000139 {Entry Point Not Found}"

File information

For all supported editions of Microsoft Windows 2000 Service Pack 4

For all supported 32-bit editions of Windows XP

For all supported x64-based editions of Windows XP Professional

For all supported 32-bit versions of Windows Server 2003

For all supported x64-based versions of Windows Server 2003

For all supported Itanium-based versions of Windows Server 2003

For all supported 32-bit editions of Windows Vista

Windows Vista and Windows Server 2008 file information

• Service Pack 1 is integrated into Windows Server 2008. Therefore, RTM milestone files only apply to Windows Vista. For example, RTM milestone files have a 6.0.0000.xxxxxx version number. GDR service branches contain only fixes that are broadly released to address widespread, critical issues. LDR service branches contain hotfixes in addition to broadly released fixes.
• The files that apply to a specific product, milestone (RTM, SPn) and service branch (LDR, GDR) can be identified by examining the file version numbers as displayed in the following table:
  Collapse this tableExpand this table

  File version number	Product	Milestone	Service branch
  6.0.6000.16xxx	Windows Vista	RTM	GDR
  6.0.6000.20xxx	Windows Vista	RTM	LDR
  6.0.6001.18xxx	Windows Vista SP1 and Windows Server 2008 SP1	SP1	GDR
  6.0.6001.22xxx	Windows Vista SP1 and Windows Server 2008 SP1	SP1	LDR

For all supported x64-based editions of Windows Vista

For all supported 32-bit editions of Windows Server 2008

For all supported x64-based editions of Windows Server 2008

For all supported Itanium-based editions of Windows Server 2008

Back to the top | Give Feedback