Description
Heap-based buffer overflow in the Office GDI+ library in Microsoft Office 2003 SP3 and 2007 SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted EMF image in an Office document, aka "GDI+ Heap Overflow Vulnerability."
References
- 49121 third-party-advisory
- 53351 vdb-entry
- oval:org.mitre.oval:def:15628 vdb-entry signature
- windows-gdi-emf-bo(75126) vdb-entry
- MS12-034 vendor-advisory
- 1027038 vdb-entry
- TA12-129A third-party-advisory