Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and cause a denial of service (crash) via a WMF file containing (1) ExtCreateRegion or (2) ExtEscape function calls with arguments with inconsistent lengths.
- http://lostmon.blogspot.com/2007/08/windows-extended-file-attributes-buffer.html
No PoCs found on GitHub currently.