Buffer overflow in Microsoft Digital_image_suite
CVE-2008-3012
gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2…
Vulnerability class: Buffer Overflow
EPSS: 0.310 (98.1th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Digital_image_suite — versions 2006
- Microsoft Forefront_client_security — versions 1.0
- Microsoft Internet_explorer — versions 6
- Microsoft Office — versions 2003, xp
- Microsoft Office_powerpoint_viewer — versions 2003
- Microsoft Office_system
- Microsoft Report_viewer — versions 2005, 2008
- Microsoft Server — versions 2008
- Microsoft Sql_server — versions 2005
- Microsoft Sql_server_reporting_services — versions 2000
Weakness classification (CWE)
References
- secure@microsoft.com (x_refsource_SECUNIA, third-party-advisory)
- secure@microsoft.com (x_refsource_HP, vendor-advisory)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
- secure@microsoft.com (signature, x_refsource_OVAL, vdb-entry)
- secure@microsoft.com (vdb-entry, x_refsource_VUPEN)
- secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)
- secure@microsoft.com (vdb-entry, x_refsource_BID)
- secure@microsoft.com (US Government Resource, x_refsource_CERT, third-party-advisory)
- secure@microsoft.com (vdb-entry, x_refsource_VUPEN)