Description
Integer overflow in GDI+ in Microsoft Office XP SP3 allows remote attackers to execute arbitrary code via an Office document with a bitmap (aka BMP) image that triggers memory corruption, aka "Office BMP Integer Overflow Vulnerability."
References
- TA09-286A third-party-advisory
- oval:org.mitre.oval:def:6430 vdb-entry signature
- MS09-062 vendor-advisory