스톰캐스트 : CVE-2009-2518

전세계

한국

한국 해킹 유형 통계

CVE-2009-2518
기본정보	공개일 : 2009-10-14 변경일 : 2010-08-21
CVSS 평가	위험도: 9.3 액세스 벡터 : NETWORK 액세스 복잡성 : 보통 인증 : 없음 기밀성 영향 : 전체 무결성 영향 : 전체 가용성 영향 : 전체 출처 : http://nvd.nist.gov 공개일 : 2009-10-15
설명	Integer overflow in GDI+ in Microsoft Office XP SP3 allows remote attackers to execute arbitrary code via an Office document with a bitmap (aka BMP) image that triggers memory corruption, aka "Office BMP Integer Overflow Vulnerability."
참조	CERT, TA09-286A MS, MS09-062
취약 소프트웨어	microsoft forefront_client_security 1.0 microsoft sql_server 2005 microsoft windows_2003_server microsoft windows_xp microsoft internet_explorer 6 microsoft office_word_viewer microsoft office_powerpoint 2007 microsoft report_viewer 2005 redistributable_package microsoft office_excel_viewer 2003 microsoft windows_vista x64 microsoft windows_vista x64 microsoft office_word_viewer 2003 microsoft office_excel_viewer 2003 microsoft 20007_office_system sp2 microsoft sql_server 2005 microsoft .net_framework 2.0 microsoft .net_framework 1.1 microsoft windows_vista - microsoft windows_xp professional_x64 microsoft office_powerpoint 2007 microsoft office_excel_viewer microsoft report_viewer 2008 redistributable_package microsoft windows_server_2008 x32 microsoft 20007_office_system sp1 microsoft office_xp sp3 microsoft office_visio 2002 microsoft works 8.5 microsoft office_groove 2007 microsoft office_groove 2007 microsoft sql_server 2005 itanium microsoft sql_server 2005 x64 microsoft sql_server 2005 itanium microsoft sql_server 2005 x64 microsoft office_compatibility_pack_for_word_excel_ppt_2007 microsoft office_word_viewer 2003 microsoft windows_vista microsoft office 2003 microsoft office_compatibility_pack_for_word_excel_ppt_2007 microsoft windows_xp microsoft office_powerpoint 2007 microsoft windows_2003_server itanium microsoft windows_server_2008 itanium microsoft windows_server_2008 x64 microsoft windows_2000 microsoft windows_2003_server x64 microsoft .net_framework 2.0 microsoft report_viewer 2008 redistributable_package microsoft office_project 2002