Unscored CVE-2012-0165 EUVD-2012-0203GHSA-vjg7-x55q-x9jv

GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 does not properly vali…

Published May 9, 2012 · Updated Aug 6, 2024 · Assigned by microsoft

Description

GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 does not properly validate record types in EMF images, which allows remote attackers to execute arbitrary code via a crafted image, aka "GDI+ Record Type Vulnerability."

References

49121 third-party-advisory
windows-gdi-emf-code-exec(75125) vdb-entry
53347 vdb-entry
oval:org.mitre.oval:def:15621 vdb-entry signature
MS12-034 vendor-advisory
1027038 vdb-entry
TA12-129A third-party-advisory