Buffer overflow in Microsoft Digital_image_suite
CVE-2008-3014
Buffer overflow in gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP…
Vulnerability class: Buffer Overflow
EPSS: 0.367 (98.3th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Digital_image_suite — versions 2006
- Microsoft Forefront_client_security — versions 1.0
- Microsoft Internet_explorer — versions 6
- Microsoft Office — versions 2003, 2007, xp
- Microsoft Office_powerpoint_viewer — versions 2003
- Microsoft Report_viewer — versions 2005, 2008
- Microsoft Server — versions 2008, 2003
- Microsoft Sql_server — versions 2005
- Microsoft Sql_server_reporting_services — versions 2000
- Microsoft Visio — versions 2002
Weakness classification (CWE)
References
- secure@microsoft.com (x_refsource_SECUNIA, third-party-advisory)
- secure@microsoft.com (x_refsource_HP, vendor-advisory)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
- secure@microsoft.com (vdb-entry, x_refsource_BID)
- secure@microsoft.com (signature, x_refsource_OVAL, vdb-entry)
- secure@microsoft.com (vdb-entry, x_refsource_VUPEN)
- secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)
- secure@microsoft.com (US Government Resource, x_refsource_CERT, third-party-advisory)
- secure@microsoft.com (vdb-entry, x_refsource_VUPEN)