Oval Definition:oval:org.mitre.oval:def:6426
Revision Date:2012-01-16Version:4
Title:Memory Corruption Vulnerability
Description:GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Memory Corruption Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2009-2528
Platform(s):Microsoft Windows 2000
Microsoft Windows XP
Product(s):Microsoft Office XP
Definition Synopsis
  • Vulnerable Microsoft Office XP, Project 2002, Visio 2002
  • Microsoft Office XP is installed
  • OR Microsoft Project 2002 SP1 is installed
  • OR Microsoft Office Visio 2002 SP2 is installed
  • AND Mso.dll version is less than 10.0.6856.0
  • BACK