Microsoft Windows GDI EMF bHandleCreateDIBPatternBrush Information Disclosure

This strike exploits an information disclosure vulnerability in Microsoft Windows GDI component. The flaw is located in bHandleCreateDIBPatternBrush function and exists due to lack of checks when parsing an EMF files BITMAPINFOHEADER fields. In order to exploit this vulnerability an attacker must entice the victim to open a malicious emf file.