CVE-2009-1217: Off-by-one error in the GpFont::SetData function in gdiplus.dll in Microsoft GDI+ on Windows XP allows remo...

Security readout for executives and security teams

This issue can let a malicious EMF image crash affected Windows XP software that uses Microsoft GDI+. The source bundle describes denial of service, not system takeover. Microsoft’s SRD reference characterized the crash as not exploitable for code execution, so urgency depends on whether legacy XP systems process untrusted EMF content. Exposure is most likely on Windows XP systems or applications that render EMF content through Microsoft GDI+. Risk is higher where users, services, or document workflows process externally supplied images or files. The bundle does not identify later Windows versions or specific third-party applications as affected. Treat this as a legacy exposure management issue, not a current critical takeover risk based on the supplied evidence. If Windows XP or EMF-processing workflows remain in production, prioritize remediation because a crafted file could disrupt affected applications. Mitigation focus: Identify remaining Windows XP systems that process EMF files.; Check Microsoft guidance for the relevant GDI+ update or workaround.; Restrict untrusted EMF handling on legacy systems where possible..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.