Lucene search

MicrosoftCVE-2008-3013

HistorySep 11, 2008 - 1:11 a.m.

CVE-2008-3013

2008-09-1101:11:47

CWE-399

microsoft

web.nvd.nist.gov

cve-2008-3013

gdi+

microsoft

internet explorer

windows xp

server 2003

vista

server 2008

office xp

office 2003

sql server

report viewer

forefront client security

remote code execution

gif parsing vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.836

Percentile

98.5%

JSON

gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a malformed GIF image file containing many extension markers for graphic control extensions and subsequent unknown labels, aka “GDI+ GIF Parsing Vulnerability.”

Affected configurations

Nvd

Node

microsoftdigital_image_suiteMatch2006

microsoftforefront_client_securityMatch1.0

microsoftinternet_explorerMatch6sp1

microsoftofficeMatch2003sp2

microsoftofficeMatch2003sp3

microsoftofficeMatch2007gold

microsoftofficeMatch2007sp1

microsoftofficeMatchxpsp3

microsoftpowerpoint_viewerMatch2003

microsoftreport_viewerMatch2005sp1

microsoftreport_viewerMatch2008

microsoftsql_serverMatch2005sp2

microsoftsql_server_reporting_servicesMatch2000sp2

microsoftvisioMatch2002sp2

microsoftworksMatch8.0

microsoftwindows_server_2008Match-

microsoftwindows_vistagold

microsoftwindows_vistasp2

microsoftwindows_xpsp2

microsoftwindows_xpsp3

VendorProductVersionCPE
microsoftdigital_image_suite2006cpe:2.3:a:microsoft:digital_image_suite:2006:*:*:*:*:*:*:*
microsoftforefront_client_security1.0cpe:2.3:a:microsoft:forefront_client_security:1.0:*:*:*:*:*:*:*
microsoftinternet_explorer6cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*
microsoftoffice2003cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*
microsoftoffice2003cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*
microsoftoffice2007cpe:2.3:a:microsoft:office:2007:*:gold:*:*:*:*:*
microsoftoffice2007cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*
microsoftofficexpcpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*
microsoftpowerpoint_viewer2003cpe:2.3:a:microsoft:powerpoint_viewer:2003:*:*:*:*:*:*:*
microsoftreport_viewer2005cpe:2.3:a:microsoft:report_viewer:2005:sp1:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	digital_image_suite	2006	cpe:2.3:a:microsoft:digital_image_suite:2006:::::::*
microsoft	forefront_client_security	1.0	cpe:2.3:a:microsoft:forefront_client_security:1.0:::::::*
microsoft	internet_explorer	6	cpe:2.3:a:microsoft:internet_explorer:6:sp1::::::
microsoft	office	2003	cpe:2.3:a:microsoft:office:2003:sp2::::::
microsoft	office	2003	cpe:2.3:a:microsoft:office:2003:sp3::::::
microsoft	office	2007	cpe:2.3:a:microsoft:office:2007::gold:::::
microsoft	office	2007	cpe:2.3:a:microsoft:office:2007:sp1::::::
microsoft	office	xp	cpe:2.3:a:microsoft:office:xp:sp3::::::
microsoft	powerpoint_viewer	2003	cpe:2.3:a:microsoft:powerpoint_viewer:2003:::::::*
microsoft	report_viewer	2005	cpe:2.3:a:microsoft:report_viewer:2005:sp1::::::