Lucene search

MicrosoftCVE-2008-3015

HistorySep 11, 2008 - 1:11 a.m.

CVE-2008-3015

2008-09-1101:11:47

CWE-189

microsoft

web.nvd.nist.gov

cve-2008-3015

integer overflow

gdiplus.dll

microsoft office

buffer overflow

nvd

vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

0.496

Percentile

97.5%

JSON

Integer overflow in gdiplus.dll in GDI+ in Microsoft Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a BMP image file with a malformed BitMapInfoHeader that triggers a buffer overflow, aka “GDI+ BMP Integer Overflow Vulnerability.”

Affected configurations

Nvd

Node

microsoftdigital_image_suiteMatch2006

microsoftforefront_client_securityMatch1.0

microsoftofficeMatch2003sp2

microsoftofficeMatch2003sp3

microsoftofficeMatch2007gold

microsoftofficeMatch2007sp1

microsoftofficeMatchxpsp3

microsoftoffice_powerpoint_viewerMatch2003

microsoftreport_viewerMatch2005sp1

microsoftreport_viewerMatch2008

microsoftsql_serverMatch2005sp2

microsoftsql_server_reporting_servicesMatch2000sp2

microsoftvisioMatch2002sp2

microsoftworksMatch8.0

VendorProductVersionCPE
microsoftdigital_image_suite2006cpe:2.3:a:microsoft:digital_image_suite:2006:*:*:*:*:*:*:*
microsoftforefront_client_security1.0cpe:2.3:a:microsoft:forefront_client_security:1.0:*:*:*:*:*:*:*
microsoftoffice2003cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*
microsoftoffice2003cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*
microsoftoffice2007cpe:2.3:a:microsoft:office:2007:*:gold:*:*:*:*:*
microsoftoffice2007cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*
microsoftofficexpcpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*
microsoftoffice_powerpoint_viewer2003cpe:2.3:a:microsoft:office_powerpoint_viewer:2003:*:*:*:*:*:*:*
microsoftreport_viewer2005cpe:2.3:a:microsoft:report_viewer:2005:sp1:*:*:*:*:*:*
microsoftreport_viewer2008cpe:2.3:a:microsoft:report_viewer:2008:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	digital_image_suite	2006	cpe:2.3:a:microsoft:digital_image_suite:2006:::::::*
microsoft	forefront_client_security	1.0	cpe:2.3:a:microsoft:forefront_client_security:1.0:::::::*
microsoft	office	2003	cpe:2.3:a:microsoft:office:2003:sp2::::::
microsoft	office	2003	cpe:2.3:a:microsoft:office:2003:sp3::::::
microsoft	office	2007	cpe:2.3:a:microsoft:office:2007::gold:::::
microsoft	office	2007	cpe:2.3:a:microsoft:office:2007:sp1::::::
microsoft	office	xp	cpe:2.3:a:microsoft:office:xp:sp3::::::
microsoft	office_powerpoint_viewer	2003	cpe:2.3:a:microsoft:office_powerpoint_viewer:2003:::::::*
microsoft	report_viewer	2005	cpe:2.3:a:microsoft:report_viewer:2005:sp1::::::
microsoft	report_viewer	2008	cpe:2.3:a:microsoft:report_viewer:2008:::::::*