Core Security announced that they have discovered a vulnerability (CVE-2013-5058) within the GDI handling code of the Windows kernel (win32k.sys) that could potentially be exploited by an attacker to crash the system or potentially execute arbitrary code.