exploits , vulnerabilities , articles , Microsoft GDI+ BMP Integer Overflow Vulnerability

Title	Microsoft GDI+ BMP Integer Overflow Vulnerability
Published	2008-09-09-12:00AM
Updated	2008-09-09-06:50PM
Class	Boundary Condition Error
CVE	CVE-2008-3015
Remote	Yes
Local	No
Credit	An anonymous researcher working with Zero Day Initiative
Vulnerable	Microsoft Works 8.0 Microsoft Visual Studio 2003 Viewer Microsoft Visio 2002 SP2 Microsoft SQL Server 2005 x64 Edition SP2 Microsoft SQL Server 2005 x64 Edition SP1 Microsoft SQL Server 2005 Itanium Edition SP2 Microsoft SQL Server 2005 Itanium Edition SP1 Microsoft SQL Server 2005 Itanium Edition 0 Microsoft SQL Server 2005 0 Microsoft SQL Server 2000 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows NT 4.0 SP6a Microsoft Windows NT 4.0 SP6 Microsoft Windows NT 4.0 SP5 Microsoft Windows NT 4.0 Microsoft Report Viewer 2008 0 Microsoft Report Viewer 2005 SP1 Microsoft Office 2007 SP1 Microsoft Office 2007 0 Microsoft Access 2007 0 Microsoft Access 2007 0 Microsoft Excel 2003 Microsoft Excel 2007 0 Microsoft Excel 2007 0 Microsoft FrontPage 2003 Microsoft Groove 2007 0 Microsoft Groove 2007 0 Microsoft InfoPath 2003 Microsoft InfoPath 2007 0 Microsoft InfoPath 2007 0 Microsoft Office Communicator 2007 0 Microsoft Office Communicator 2007 0 Microsoft OneNote 2003 0 Microsoft Outlook 2003 0 Microsoft Outlook 2007 0 Microsoft Outlook 2007 0 Microsoft PowerPoint 2003 0 Microsoft PowerPoint 2007 0 Microsoft PowerPoint 2007 0 Microsoft Project Professional 2007 0 Microsoft Project Professional 2007 0 Microsoft Project Standard 2007 0 Microsoft Project Standard 2007 0 Microsoft Publisher 2003 Microsoft Publisher 2007 0 Microsoft Publisher 2007 0 Microsoft SharePoint Designer 2007 0 Microsoft SharePoint Designer 2007 0 Microsoft Visio Professional 2007 0 Microsoft Visio Professional 2007 0 Microsoft Visio Standard 2007 0 Microsoft Visio Standard 2007 0 Microsoft Office 2003 SP3 Microsoft Office 2003 SP2 Microsoft Office 2003 SP1 Microsoft Office 2003 0 Microsoft Excel 2003 Microsoft FrontPage 2003 Microsoft InfoPath 2003 Microsoft OneNote 2003 0 Microsoft Outlook 2003 0 Microsoft PowerPoint 2003 0 Microsoft Publisher 2003 Microsoft Forefront Client Security 1.0 Microsoft Digital Image Suite 2006
Not Vulnerable
Code	Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: content@securitydot.net.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-19 Serv-U File Server User Directory Information Disclosure Vulnerability
2009-12-18 ReVou Comment Field HTML Injection Vulnerability
2009-12-18 Adobe Flash Media Server Resource Exhaustion Remote Denial of Service Vulnerability
2009-12-18 Centreon Authentication Mechanism Security Bypass Vulnerability
2009-12-18 Family Connections Multiple Input Validation Vulnerabilities
2009-12-18 Drupal Contact and Menu Modules Multiple HTML Injection Vulnerabilities
2009-12-18 Mozilla Firefox and SeaMonkey NTLM Credential Reflection Authentication Bypass Vulnerability
2009-12-18 Mozilla Firefox CVE-2009-3982 JavaScript Engine Multiple Remote Memory Corruption Vulnerabilities
2009-12-17 Zen Cart Insecure File and Programs Information Disclosure and Database Deletion Vulnerability
2009-12-17 Winamp Module Decoder Plugin Multiple Buffer Overflow Vulnerabilities