스톰캐스트 : CVE-2009-2528

전세계

한국

한국 해킹 유형 통계

CVE-2009-2528
기본정보	공개일 : 2009-10-14 변경일 : 2010-08-21
CVSS 평가	위험도: 9.3 액세스 벡터 : NETWORK 액세스 복잡성 : 보통 인증 : 없음 기밀성 영향 : 전체 무결성 영향 : 전체 가용성 영향 : 전체 출처 : http://nvd.nist.gov 공개일 : 2009-10-15
설명	GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Memory Corruption Vulnerability."
참조	CERT, TA09-286A MS, MS09-062
취약 소프트웨어	microsoft forefront_client_security 1.0 microsoft sql_server 2005 microsoft internet_explorer 6 microsoft windows_xp microsoft office_word_viewer microsoft report_viewer 2005 redistributable_package microsoft office_compatibility_pack 2007 microsoft office 2007 microsoft windows_vista microsoft sql_server 2005 microsoft windows_xp professional_x64 microsoft office_excel_viewer microsoft report_viewer 2008 redistributable_package microsoft excel_viewer 2003 microsoft project 2002 microsoft visual_foxpro 8.0 microsoft expression_web 2 microsoft works 8.5 microsoft office_groove 2007 microsoft word_viewer 2003 microsoft word_viewer 2003 microsoft office 2007 microsoft sql_server 2005 x64 microsoft windows_vista microsoft office 2003 microsoft windows_xp microsoft windows_2003_server itanium microsoft windows_server_2008 itanium microsoft sql_server_reporting_services 2000 microsoft visual_studio_.net 2003 microsoft excel_viewer 2003 microsoft office_powerpoint_viewer microsoft expression_web microsoft windows_2003_server x64 microsoft platform_sdk redistrutable_gdi%2B microsoft windows_2003_server microsoft office xp microsoft office_powerpoint_viewer 2007 microsoft windows_vista x64 microsoft windows_vista x64 microsoft .net_framework 2.0 microsoft .net_framework 1.1 microsoft visual_studio 2008 microsoft visual_foxpro 9.0 microsoft visual_studio 2008 microsoft windows_server_2008 x32 microsoft office_groove 2007 microsoft sql_server 2005 itanium microsoft sql_server 2005 x64 microsoft sql_server 2005 itanium microsoft visio 2002 microsoft office_powerpoint_viewer 2007 microsoft windows_server_2008 x64 microsoft office_compatibility_pack 2007 microsoft .net_framework 2.0 microsoft report_viewer 2008 redistributable_package microsoft visual_studio_.net 2005