Multiple buffer overflows in GDI on WMF and WMF windows metafile formats.
vulners.com/securityvulns/securityvulns:doc:10172
vulners.com/securityvulns/securityvulns:doc:10173
vulners.com/securityvulns/securityvulns:doc:10174
vulners.com/securityvulns/securityvulns:doc:10175