ByteOS Network

CVE Vulnerability Details :

CVE-2008-3015

PUBLISHED

More Info Official Page

Assigner-microsoft

Assigner Org ID-f38d906d-7342-40ea-92c1-6c4a2c6478c8

Published At-10 Sep, 2008 | 15:00

Updated At-07 Aug, 2024 | 09:21

▼CVE Numbering Authority (CNA)

Integer overflow in gdiplus.dll in GDI+ in Microsoft Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a BMP image file with a malformed BitMapInfoHeader that triggers a buffer overflow, aka "GDI+ BMP Integer Overflow Vulnerability."

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://secunia.com/advisories/32154	third-party-advisory x_refsource_SECUNIA
http://www.securitytracker.com/id?1020838	vdb-entry x_refsource_SECTRACK
http://marc.info/?l=bugtraq&m=122235754013992&w=2	vendor-advisory x_refsource_HP
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052	vendor-advisory x_refsource_MS
http://www.securityfocus.com/archive/1/496153/100/0/threaded	mailing-list x_refsource_BUGTRAQ
http://www.vupen.com/english/advisories/2008/2696	vdb-entry x_refsource_VUPEN
http://www.evilfingers.com/patchTuesday/MS08_052_GDI+_Vulnerability.txt	x_refsource_MISC
https://www.exploit-db.com/exploits/6716	exploit x_refsource_EXPLOIT-DB
http://www.zerodayinitiative.com/advisories/ZDI-08-055	x_refsource_MISC
http://marc.info/?l=bugtraq&m=122235754013992&w=2	vendor-advisory x_refsource_HP
http://www.securityfocus.com/bid/31022	vdb-entry x_refsource_BID
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5881	vdb-entry signature x_refsource_OVAL
http://www.evilfingers.com/patchTuesday/MS08_052_GDI+_Vulnerability_ver2.txt	x_refsource_MISC
https://www.exploit-db.com/exploits/6619	exploit x_refsource_EXPLOIT-DB
http://www.us-cert.gov/cas/techalerts/TA08-253A.html	third-party-advisory x_refsource_CERT
http://www.vupen.com/english/advisories/2008/2520	vdb-entry x_refsource_VUPEN

Hyperlink: http://secunia.com/advisories/32154

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.securitytracker.com/id?1020838

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://marc.info/?l=bugtraq&m=122235754013992&w=2

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052

Resource:

vendor-advisory

x_refsource_MS

Hyperlink: http://www.securityfocus.com/archive/1/496153/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://www.vupen.com/english/advisories/2008/2696

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.evilfingers.com/patchTuesday/MS08_052_GDI+_Vulnerability.txt

Resource:

x_refsource_MISC

Hyperlink: https://www.exploit-db.com/exploits/6716

Resource:

exploit

x_refsource_EXPLOIT-DB

Hyperlink: http://www.zerodayinitiative.com/advisories/ZDI-08-055

Resource:

x_refsource_MISC

Hyperlink: http://marc.info/?l=bugtraq&m=122235754013992&w=2

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: http://www.securityfocus.com/bid/31022

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5881

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://www.evilfingers.com/patchTuesday/MS08_052_GDI+_Vulnerability_ver2.txt

Resource:

x_refsource_MISC

Hyperlink: https://www.exploit-db.com/exploits/6619

Resource:

exploit

x_refsource_EXPLOIT-DB

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA08-253A.html

Resource:

third-party-advisory

x_refsource_CERT

Hyperlink: http://www.vupen.com/english/advisories/2008/2520

Resource:

vdb-entry

x_refsource_VUPEN

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://secunia.com/advisories/32154	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.securitytracker.com/id?1020838	vdb-entry x_refsource_SECTRACK x_transferred
http://marc.info/?l=bugtraq&m=122235754013992&w=2	vendor-advisory x_refsource_HP x_transferred
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052	vendor-advisory x_refsource_MS x_transferred
http://www.securityfocus.com/archive/1/496153/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
http://www.vupen.com/english/advisories/2008/2696	vdb-entry x_refsource_VUPEN x_transferred
http://www.evilfingers.com/patchTuesday/MS08_052_GDI+_Vulnerability.txt	x_refsource_MISC x_transferred
https://www.exploit-db.com/exploits/6716	exploit x_refsource_EXPLOIT-DB x_transferred
http://www.zerodayinitiative.com/advisories/ZDI-08-055	x_refsource_MISC x_transferred
http://marc.info/?l=bugtraq&m=122235754013992&w=2	vendor-advisory x_refsource_HP x_transferred
http://www.securityfocus.com/bid/31022	vdb-entry x_refsource_BID x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5881	vdb-entry signature x_refsource_OVAL x_transferred
http://www.evilfingers.com/patchTuesday/MS08_052_GDI+_Vulnerability_ver2.txt	x_refsource_MISC x_transferred
https://www.exploit-db.com/exploits/6619	exploit x_refsource_EXPLOIT-DB x_transferred
http://www.us-cert.gov/cas/techalerts/TA08-253A.html	third-party-advisory x_refsource_CERT x_transferred
http://www.vupen.com/english/advisories/2008/2520	vdb-entry x_refsource_VUPEN x_transferred

Hyperlink: http://secunia.com/advisories/32154

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.securitytracker.com/id?1020838

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://marc.info/?l=bugtraq&m=122235754013992&w=2

Resource:

vendor-advisory

x_refsource_HP

x_transferred

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052

Resource:

vendor-advisory

x_refsource_MS

x_transferred

Hyperlink: http://www.securityfocus.com/archive/1/496153/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2008/2696

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.evilfingers.com/patchTuesday/MS08_052_GDI+_Vulnerability.txt

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://www.exploit-db.com/exploits/6716

Resource:

exploit

x_refsource_EXPLOIT-DB

x_transferred

Hyperlink: http://www.zerodayinitiative.com/advisories/ZDI-08-055

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://marc.info/?l=bugtraq&m=122235754013992&w=2

Resource:

vendor-advisory

x_refsource_HP

x_transferred

Hyperlink: http://www.securityfocus.com/bid/31022

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5881

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://www.evilfingers.com/patchTuesday/MS08_052_GDI+_Vulnerability_ver2.txt

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://www.exploit-db.com/exploits/6619

Resource:

exploit

x_refsource_EXPLOIT-DB

x_transferred

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA08-253A.html

Resource:

third-party-advisory

x_refsource_CERT

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2008/2520

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References