Unscored CVE-2009-2528 EUVD-2009-2523GHSA-qq8p-5v5h-rxf8

GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to …

Published Oct 14, 2009 · Updated Aug 7, 2024 · Assigned by microsoft

Description

GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Memory Corruption Vulnerability."

References

TA09-286A third-party-advisory
oval:org.mitre.oval:def:6426 vdb-entry signature
MS09-062 vendor-advisory