CVE

Id
39936  
CVE No.
CVE-2009-2501  
Status
Candidate  
Description
Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted PNG image file, aka "GDI+ PNG Heap Overflow Vulnerability."  
Phase
Assigned (20090717)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
438957 39936 CVE-2009-2501 MS:MS09-062  View
438958 39936 CVE-2009-2501 URL:http://www.microsoft.com/technet/security/Bulletin/MS09-062.mspx  View
438959 39936 CVE-2009-2501 CERT:TA09-286A  View
438960 39936 CVE-2009-2501 URL:http://www.us-cert.gov/cas/techalerts/TA09-286A.html  View
438961 39936 CVE-2009-2501 OVAL:oval:org.mitre.oval:def:5800  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41423 JVNDB-2009-002430 Microsoft Windows のインターネット認証サービスにおける任意のコードを実行される脆弱性 Microsoft Windows のインターネット認証サービスには、MS-CHAP v2 を使用する PEAP 認証リクエストが適切に検証されないため、任意のコードを実行される脆弱性が存在します。 CVE-2009-2505 39936 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002430.html  View