NVD

Id
49745  
Name
CVE-2009-2500  
Description
Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted WMF image file, aka "GDI+ WMF Integer Overflow Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-10-14  
Modified Date
2010-08-21  
Seq
2009-2500  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
251579 49745 CVE-2009-2500 oval:org.mitre.oval:def:5967  View
251580 49745 CVE-2009-2500 MS09-062  View
251581 49745 CVE-2009-2500 TA09-286A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41227 JVNDB-2009-002234 GDI+ の WMF 画像ファイル処理における整数オーバーフローの脆弱性 複数の Microsoft 製品で使用される GDI+ には、WMF 画像ファイルの処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2009-2500 39931 CVE-2009-2500 49745 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002234.html 2009-10-13 2009-11-18 View