Vulnerability Name: CVE-2008-3013 (CCN-44713) Assigned: 2008-09-09 Published: 2008-09-09 Updated: 2021-07-23 Summary: gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a malformed GIF image file containing many extension markers for graphic control extensions and subsequent unknown labels, aka "GDI+ GIF Parsing Vulnerability." CVSS v3 Severity: 10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Exploitability Metrics: Attack Vector (AV): NetworkAttack Complexity (AC): LowPrivileges Required (PR): NoneUser Interaction (UI): NoneScope: Scope (S): ChangedImpact Metrics: Confidentiality (C): HighIntegrity (I): HighAvailibility (A): High
CVSS v2 Severity: 9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C 6.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C Exploitability Metrics: Access Vector (AV): NetworkAccess Complexity (AC): MediumAuthentication (Au): NoneImpact Metrics: Confidentiality (C): CompleteIntegrity (I): CompleteAvailibility (A): Complete
9.3 High (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C 6.9 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C Exploitability Metrics: Access Vector (AV): NetworkAccess Complexity (AC): MediumAthentication (Au): NoneImpact Metrics: Confidentiality (C): CompleteIntegrity (I): CompleteAvailibility (A): Complete
Vulnerability Type: CWE-399 Vulnerability Consequences: Gain Access References: Source: MITRECVE-2008-3013 Windows GDI+ GIF memory corruption http://ifsec.blogspot.com/2008/09/windows-gdi-gif-memory-corruption.html HPSBST02372 WinZip GDI+ Multiple Vulnerabilities 32154 Microsoft GDI+ Bug in Processing GIF Image Files Lets Remote Users Execute Arbitrary Code MS08-052 Vulnerabilities in GDI+ Could Allow Remote Code Execution (954593) Nortel Response to Microsoft Security Bulletin MS08-052 Vulnerability in Microsoft Excel Could Allow Remote Code Execution (2640241) Vulnerability in Microsoft Office Could Allow for Remote Code Execution (2639185) Vulnerability in Microsoft Word Could Allow Remote Code Execution (2680352) Combined Security Update for Microsoft Office, Windows, .NET Framework, and Silverlight (2681578) Vulnerability in Microsoft Office Could Allow for Remote Code Execution (2731879) Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (2742319) Vulnerability in Microsoft Works Could Allow Remote Code Execution (KB2754670) Vulnerability in SQL Server Could Allow Elevation of Privilege (2754849) Vulnerability in Microsoft Word Could Allow Remote Code Execution (2780642) Vulnerability in Silverlight Could Allow Remote Code Execution (2814124) Vulnerability in Microsoft Word Could Allow Remote Code Execution (2830399) Vulnerability in Windows Components Could Allow Remote Code Execution (2848295) Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2845537) Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2885080) Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (2885084) Vulnerabilities in Microsoft Word and Office Web Apps Could Allow Remote Code Execution (2916605) Vulnerabilities in Microsoft Word and Office Web Apps Could Allow Remote Code Execution (2949660) Vulnerability in Microsoft Word Could Allow Remote Code Execution (2969261) Vulnerability in Windows Journal Could Allow Remote Code Execution (2975689) Vulnerabilities in SQL Server Could Allow Elevation of Privilege (2984340) Vulnerability in Microsoft Word and Office Web Apps Could Allow Remote Code Execution (3000434) Vulnerability in Microsoft Office Could Allow Remote Code Execution (3009710) Vulnerabilities in Microsoft Word and Office Web Apps Could Allow Remote Code Execution (3017301) Vulnerabilities in MicrosoftExcel Could Allow Remote Code Execution (3017347) Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3080790) Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3089664) Security Updates for Microsoft Office (3096440) Security Updates for Microsoft Office to Address Remote Code Execution (3104540) Security Update for Microsoft Office to Address Remote Code Execution (3116111) Security Update for Microsoft Office to Address Remote Code Execution - Critical (3124585) Security Update for Microsoft Office to Address Remote Code Execution (3134226) Security Update for Microsoft Office to Address Remote Code Execution (3141806) Security Update for Microsoft Office (3148775) Security Update for Microsoft Office (3155544) Security Update for Office (3163610) Security Updates for Office (3170008) Security Update for Office (3177451) Security Update for Microsoft Office (3185852) Security Update for Microsoft Office (3194063) Security Update for Microsoft Office (3199168) Security Update for Microsoft Office (3204068) Security Update for Microsoft Office (3214291) Security Update for Microsoft Graphics Component (4013075) Security Update for Microsoft Office (4013241) Vulnerabilities in GDI+ Could Allow Remote Code Execution (954593) Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution (957173) Vulnerability in Microsoft SQL Server Could Allow Remote Code Execution (959420) Vulnerabilities in Microsoft Office PowerPoint Could Allow Remote Code Execution (967340) Vulnerability in Microsoft Works Converters Could Allow Remote Code Execution (957632) Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution (969514) Vulnerabilities in GDI+ Could Allow Remote Code Execution (957488) Vulnerability in Microsoft Office Word Allows Remote Code Execution (976307) Vulnerability in WordPad and Office Text Converters Could Allow Remote Code Execution (975539) Vulnerability in Microsoft Office (MSO) Could Allow Remote Code Execution (978214) Vulnerabilities in Microsoft Office PowerPoint Could Allow Remote Code Execution (975416) Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (980094) Vulnerabilities in COM validation in Microsoft Office Could Allow Remote Code Execution (983235 Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution (2269638) Vulnerability in Microsoft Office Excel Could Allow Remote Code Execution (2269707) Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (2293194) Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2423930) Vulnerabilities in Microsoft Office Graphics Filters Could Allow for Remote Code Execution (968095) Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (2451879) Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2489279) Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2489293) Vulnerability in GDI+ Could Allow Remote Code Execution (2489979) Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2537146) Vulnerability in the Microsoft XML Editor Could Allow Information Disclosure (2543893) Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (2560978) Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2587505) 20080909 ZDI-08-056: Microsoft Windows GDI+ GIF Parsing Code Execution Vulnerability 31020 Microsoft GDI+ GIF File Parsing Remote Code Execution Vulnerability 1020836 TA08-253A ADV-2008-2520 ADV-2008-2696 http://www.zerodayinitiative.com/advisories/ZDI-08-056 http://www.zerodayinitiative.com/advisories/ZDI-08-056/ MS08-052 win-gdi-gif-bo(44713) oval:org.mitre.oval:def:5986 Microsoft Windows GDI+ GIF Parsing Code Execution Vulnerability Vulnerable Configuration: Configuration 1 :cpe:/a:microsoft:office:xp:sp3:*:*:*:*:*:* OR cpe:/a:microsoft:office:2003:sp2:*:*:*:*:*:* OR cpe:/a:microsoft:sql_server_reporting_services:2000:sp2:*:*:*:*:*:* OR cpe:/a:microsoft:sql_server:2005:sp2:*:*:*:*:*:* OR cpe:/o:microsoft:windows_xp:*:sp3:*:*:*:*:*:* OR cpe:/o:microsoft:windows_vista:*:gold:*:*:*:*:*:* OR cpe:/a:microsoft:office:2007:sp1:*:*:*:*:*:* OR cpe:/a:microsoft:visio:2002:sp2:*:*:*:*:*:* OR cpe:/a:microsoft:forefront_client_security:1.0:*:*:*:*:*:*:* OR cpe:/a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:* OR cpe:/o:microsoft:windows_xp:*:sp2:*:*:*:*:*:* OR cpe:/a:microsoft:powerpoint_viewer:2003:*:*:*:*:*:*:* OR cpe:/a:microsoft:digital_image_suite:2006:*:*:*:*:*:*:* OR cpe:/o:microsoft:windows_server_2008:*:*:*:*:*:*:*:* OR cpe:/a:microsoft:report_viewer:2005:sp1:*:*:*:*:*:* OR cpe:/a:microsoft:report_viewer:2008:*:*:*:*:*:*:* OR cpe:/o:microsoft:windows_vista:*:sp2:*:*:*:*:*:* OR cpe:/a:microsoft:office:2007:*:gold:*:*:*:*:* OR cpe:/a:microsoft:office:2003:sp3:*:*:*:*:*:* OR cpe:/a:microsoft:works:8.0:*:*:*:*:*:*:* Configuration CCN 1 :cpe:/a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:* OR cpe:/o:microsoft:windows_2000:*:sp4:*:*:*:*:*:* OR cpe:/o:microsoft:windows:2003_server:*:x64:*:*:*:*:* OR cpe:/o:microsoft:windows:xp:sp2:*:*:*:*:*:* OR cpe:/a:microsoft:visio:2002:sp2:*:*:*:*:*:* OR cpe:/a:microsoft:office:xp:sp3:*:*:*:*:*:* OR cpe:/o:microsoft:windows:2003_server:sp1:*:*:*:*:*:* OR cpe:/o:microsoft:windows:2003_server:sp1_itanium:*:*:*:*:*:* OR cpe:/a:microsoft:office:2003:sp2:*:*:*:*:*:* OR cpe:/a:microsoft:works:8.0:*:*:*:*:*:*:* OR cpe:/o:microsoft:windows_vista:*:*:*:*:*:*:*:* OR cpe:/o:microsoft:windows:server_2003:sp2:*:*:*:*:*:* OR cpe:/o:microsoft:windows:server_2003:sp2:itanium:*:*:*:*:* OR cpe:/o:microsoft:windows:server_2003:sp2:x64:*:*:*:*:* OR cpe:/o:microsoft:windows_vista:*:*:*:*:*:*:x64:* OR cpe:/o:microsoft:windows_xp::sp2:x64:*:professional:*:*:* OR cpe:/a:microsoft:office_compatibility_pack:2007:*:*:*:*:*:*:* OR cpe:/a:microsoft:groove_server:2007:*:*:*:*:*:*:* OR cpe:/a:microsoft:office:2007:*:*:*:*:*:*:* OR cpe:/a:microsoft:expression_web:*:*:*:*:*:*:*:* OR cpe:/a:microsoft:office:2003:sp3:*:*:*:*:*:* OR cpe:/a:microsoft:sql_server:2005:sp2:*:*:*:*:*:* OR cpe:/o:microsoft:windows_vista:*:sp1:*:*:*:*:*:* OR cpe:/o:microsoft:windows_vista:*:sp1:*:*:*:*:x64:* OR cpe:/a:microsoft:sql_server:2005:sp2:*:*:*:*:x64:* OR cpe:/a:microsoft:sql_server:2005:sp2:*:*:*:*:itanium:* OR cpe:/a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:* OR cpe:/a:microsoft:windows_messenger:5.1:*:*:*:*:*:*:* OR cpe:/a:microsoft:powerpoint_viewer:2003:*:*:*:*:*:*:* OR cpe:/a:microsoft:office:2007:sp1:*:*:*:*:*:* OR cpe:/a:microsoft:sql_server_reporting_services:2000:sp2:*:*:*:*:*:* OR cpe:/a:microsoft:report_viewer:2005:sp1:*:*:*:*:*:* OR cpe:/a:microsoft:report_viewer:2008:*:*:*:*:*:*:* OR cpe:/a:microsoft:digital_image_suite:2006:*:*:*:*:*:*:* OR cpe:/a:microsoft:forefront_client_security:1.0:*:*:*:*:*:*:* OR cpe:/a:microsoft:expression_web:2:*:*:*:*:*:*:* OR cpe:/o:microsoft:windows_server_2008:*:*:*:*:*:*:itanium:* OR cpe:/o:microsoft:windows_server_2008:*:*:*:*:*:*:x32:* OR cpe:/o:microsoft:windows_server_2008:*:*:*:*:*:*:x64:* OR cpe:/o:microsoft:windows:xp:sp3:*:*:*:*:*:* Oval Definitions BACK
microsoft office xp sp3
microsoft office 2003 sp2
microsoft sql server reporting services 2000 sp2
microsoft sql server 2005 sp2
microsoft windows xp * sp3
microsoft windows vista * gold
microsoft office 2007 sp1
microsoft visio 2002 sp2
microsoft forefront client security 1.0
microsoft internet explorer 6 sp1
microsoft windows xp * sp2
microsoft powerpoint viewer 2003
microsoft digital image suite 2006
microsoft windows server 2008 -
microsoft report viewer 2005 sp1
microsoft report viewer 2008
microsoft windows vista * sp2
microsoft office 2007
microsoft office 2003 sp3
microsoft works 8.0
microsoft ie 6.0
microsoft windows 2000 * sp4
microsoft windows 2003_server
microsoft windows xp sp2
microsoft visio 2002 sp2
microsoft office xp sp3
microsoft windows 2003_server sp1
microsoft windows 2003_server sp1_itanium
microsoft office 2003 sp2
microsoft works 8.0
microsoft windows vista *
microsoft windows server_2003 sp2
microsoft windows server_2003 sp2
microsoft windows server_2003 sp2
microsoft windows vista *
microsoft windows xp sp2
microsoft office compatibility pack 2007
microsoft groove server 2007
microsoft office 2007
microsoft expression web *
microsoft office 2003 sp3
microsoft sql server 2005 sp2
microsoft windows vista * sp1
microsoft windows vista * sp1
microsoft sql server 2005 sp2
microsoft sql server 2005 sp2
microsoft office compatibility pack 2007 sp1
microsoft windows messenger 5.1
microsoft powerpoint viewer 2003
microsoft office 2007 sp1
microsoft sql server reporting services 2000 sp2
microsoft report viewer 2005 sp1
microsoft report viewer 2008
microsoft digital image suite 2006
microsoft forefront client security 1.0
microsoft expression web 2
microsoft windows server 2008
microsoft windows server 2008 -
microsoft windows server 2008 -
microsoft windows xp sp3
Denotes that component is vulnerable