赛门铁克公司对其客户的分析报告中说明:“此漏洞并不影响英文系统的用户,但是通过修改执行远程代码也可能构成系统崩溃”.赛门铁克公司目前已经掌握了这个漏洞,据分析这是一种把包含恶意代码的EMF图像伪装成JPG文件的方法,如果伪装得当,此漏洞就会被触发.

/////////////////////////////////////////////////////////////
///Exploit the MS08-021 : Stack Overflow on GDI API
///Author: Lamhtz
///Date: April 14th, 2008
///Usage: <appname.exe> [filename]
///Function: Generate a crafted emf file which could
/// automatically run calc.exe in Win2kSP4 CHS Version
/// with MS07-046 patched but no MS08-021 is installed.
/// In Windows XP SP2, explorer.exe will crashed but
/// calc will not be run.
/////////////////////////////////////////////////////////////

http://www.milw0rm.com/sploits/2008-exploit_08021.zip

// milw0rm.com [2008-04-14]