스톰캐스트 : CVE-2009-2501

전세계

한국

한국 해킹 유형 통계

CVE-2009-2501
기본정보	공개일 : 2009-10-14 변경일 : 2010-08-21
CVSS 평가	위험도: 9.3 액세스 벡터 : NETWORK 액세스 복잡성 : 보통 인증 : 없음 기밀성 영향 : 전체 무결성 영향 : 전체 가용성 영향 : 전체 출처 : http://nvd.nist.gov 공개일 : 2009-10-14
설명	Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted PNG image file, aka "GDI+ PNG Heap Overflow Vulnerability."
참조	CERT, TA09-286A MS, MS09-062
취약 소프트웨어	microsoft forefront_client_security 1.0 microsoft sql_server 2005 microsoft internet_explorer 6 microsoft windows_xp microsoft office_word_viewer microsoft report_viewer 2005 redistributable_package microsoft office_compatibility_pack 2007 microsoft office 2007 microsoft windows_vista microsoft sql_server 2005 microsoft windows_xp professional_x64 microsoft office_excel_viewer microsoft report_viewer 2008 redistributable_package microsoft excel_viewer 2003 microsoft project 2002 microsoft visual_foxpro 8.0 microsoft expression_web 2 microsoft works 8.5 microsoft office_groove 2007 microsoft word_viewer 2003 microsoft word_viewer 2003 microsoft office 2007 microsoft sql_server 2005 x64 microsoft windows_vista microsoft office 2003 microsoft windows_xp microsoft windows_2003_server itanium microsoft windows_server_2008 itanium microsoft sql_server_reporting_services 2000 microsoft visual_studio_.net 2003 microsoft excel_viewer 2003 microsoft office_powerpoint_viewer microsoft expression_web microsoft windows_2003_server x64 microsoft platform_sdk redistrutable_gdi%2B microsoft windows_2003_server microsoft office xp microsoft office_powerpoint_viewer 2007 microsoft windows_vista x64 microsoft windows_vista x64 microsoft .net_framework 2.0 microsoft .net_framework 1.1 microsoft visual_studio 2008 microsoft visual_foxpro 9.0 microsoft visual_studio 2008 microsoft windows_server_2008 x32 microsoft office_groove 2007 microsoft sql_server 2005 itanium microsoft sql_server 2005 x64 microsoft sql_server 2005 itanium microsoft visio 2002 microsoft office_powerpoint_viewer 2007 microsoft windows_server_2008 x64 microsoft office_compatibility_pack 2007 microsoft .net_framework 2.0 microsoft report_viewer 2008 redistributable_package microsoft visual_studio_.net 2005