Vulnerability in Microsoft Digital_image_suite
CVE-2008-3015
Integer overflow in gdiplus.dll in GDI+ in Microsoft Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Se…
EPSS: 0.393 (98.4th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Digital_image_suite — versions 2006
- Microsoft Forefront_client_security — versions 1.0
- Microsoft Office — versions 2003, 2007, xp
- Microsoft Office_powerpoint_viewer — versions 2003
- Microsoft Report_viewer — versions 2005, 2008
- Microsoft Sql_server — versions 2005
- Microsoft Sql_server_reporting_services — versions 2000
- Microsoft Visio — versions 2002
- Microsoft Works — versions 8.0
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@microsoft.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)
- secure@microsoft.com (x_refsource_HP, vendor-advisory)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
- secure@microsoft.com (mailing-list, x_refsource_BUGTRAQ)
- secure@microsoft.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- secure@microsoft.com (x_refsource_MISC)
- secure@microsoft.com (exploit, x_refsource_EXPLOIT-DB)
- secure@microsoft.com (x_refsource_MISC)
- secure@microsoft.com (vdb-entry, x_refsource_BID)