Vulnerability in N/a

CVE-2008-3015

Integer overflow in gdiplus.dll in GDI+ in Microsoft Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Se…

EPSS: 0.715 (98.7th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

32154 (x_refsource_SECUNIA, third-party-advisory)
1020838 (vdb-entry, x_refsource_SECTRACK)
HPSBST02372 (x_refsource_HP, vendor-advisory)
MS08-052 (x_refsource_MS, vendor-advisory)
20080909 ZDI-08-055: Microsoft Windows GDI+ BMP Parsing Code Execution Vulnerability (mailing-list, x_refsource_BUGTRAQ)
ADV-2008-2696 (vdb-entry, x_refsource_VUPEN)
www.evilfingers.com/patchTuesday/MS08_052_GDI+_Vulnerability.txt (x_refsource_MISC)
6716 (exploit, x_refsource_EXPLOIT-DB)
www.zerodayinitiative.com/advisories/ZDI-08-055 (x_refsource_MISC)
31022 (vdb-entry, x_refsource_BID)