9.3
CVSSv2

CVE-2009-2528

Published: 14/10/2009 Updated: 07/12/2023
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote malicious users to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Memory Corruption Vulnerability."

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft windows 2003 server

microsoft windows xp

microsoft windows vista

microsoft windows server 2008

microsoft .net_framework 1.1

microsoft .net_framework 2.0

microsoft internet_explorer 6

microsoft report viewer 2008

microsoft sql server reporting services 2000

microsoft sql server 2005

microsoft report viewer 2005

microsoft expression web

microsoft project 2002

microsoft office powerpoint viewer 2007

microsoft office excel viewer

microsoft office word viewer

microsoft office compatibility pack 2007

microsoft office 2007

microsoft excel viewer 2003

microsoft expression web 2

microsoft visio 2002

microsoft office powerpoint viewer

microsoft works 8.5

microsoft word viewer 2003

microsoft office groove 2007

microsoft office 2003

microsoft office xp

microsoft visual studio .net 2003

microsoft visual studio .net 2005

microsoft visual studio 2008

microsoft platform sdk

microsoft forefront_client_security 1.0

microsoft visual_foxpro 8.0

microsoft visual_foxpro 9.0