MS Windows GDI Local Privilege Escalation Exploit (MS07-017)

Here is a sploit for the GDI MS07-017 Local Privilege Escalation, presented during the last blackhat conferences by Joel Ericksson. Modifies the GdiTable of the current process and by calling good API's changes an entry of the win32k's SSDT [System Service Dispatch Table] by 0x2.

http://www.milw0rm.com/exploits/3688

-----------------------

Also on Milw0rm, Muts has posted several "points of interest" that he found in Microsoft Office 2007 using a small python file fuzzer.