Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold SP1 and SP2; and Vista allows local users to gain privileges via certain \color-related parameters\ in crafted images.