Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold SP1 and SP2; and Vista allows local users to gain privileges via a crafted Enhanced Metafile (EMF) image format file.