Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2008-3015
Modified
More InfoOfficial Page
Source-secure@microsoft.com
View Known Exploited Vulnerability (KEV) details
Published At-11 Sep, 2008 | 01:11
Updated At-23 Apr, 2026 | 00:35

Integer overflow in gdiplus.dll in GDI+ in Microsoft Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a BMP image file with a malformed BitMapInfoHeader that triggers a buffer overflow, aka "GDI+ BMP Integer Overflow Vulnerability."

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.09.3HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
Type: Primary
Version: 2.0
Base score: 9.3
Base severity: HIGH
Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C
CPE Matches
Microsoft Corporation
microsoft
>>digital_image_suite>>2006
cpe:2.3:a:microsoft:digital_image_suite:2006:*:*:*:*:*:*:*
Microsoft Corporation
microsoft
>>forefront_client_security>>1.0
cpe:2.3:a:microsoft:forefront_client_security:1.0:*:*:*:*:*:*:*
Microsoft Corporation
microsoft
>>office>>2003
cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*
Microsoft Corporation
microsoft
>>office>>2003
cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*
Microsoft Corporation
microsoft
>>office>>2007
cpe:2.3:a:microsoft:office:2007:*:gold:*:*:*:*:*
Microsoft Corporation
microsoft
>>office>>2007
cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*
Microsoft Corporation
microsoft
>>office>>xp
cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*
Microsoft Corporation
microsoft
>>office_powerpoint_viewer>>2003
cpe:2.3:a:microsoft:office_powerpoint_viewer:2003:*:*:*:*:*:*:*
Microsoft Corporation
microsoft
>>report_viewer>>2005
cpe:2.3:a:microsoft:report_viewer:2005:sp1:*:*:*:*:*:*
Microsoft Corporation
microsoft
>>report_viewer>>2008
cpe:2.3:a:microsoft:report_viewer:2008:*:*:*:*:*:*:*
Microsoft Corporation
microsoft
>>sql_server>>2005
cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:*:*
Microsoft Corporation
microsoft
>>sql_server_reporting_services>>2000
cpe:2.3:a:microsoft:sql_server_reporting_services:2000:sp2:*:*:*:*:*:*
Microsoft Corporation
microsoft
>>visio>>2002
cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*
Microsoft Corporation
microsoft
>>works>>8.0
cpe:2.3:a:microsoft:works:8.0:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-189Primarynvd@nist.gov
CWE ID: CWE-189
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://marc.info/?l=bugtraq&m=122235754013992&w=2secure@microsoft.com
N/A
http://secunia.com/advisories/32154secure@microsoft.com
Vendor Advisory
http://www.evilfingers.com/patchTuesday/MS08_052_GDI+_Vulnerability.txtsecure@microsoft.com
N/A
http://www.evilfingers.com/patchTuesday/MS08_052_GDI+_Vulnerability_ver2.txtsecure@microsoft.com
N/A
http://www.securityfocus.com/archive/1/496153/100/0/threadedsecure@microsoft.com
N/A
http://www.securityfocus.com/bid/31022secure@microsoft.com
N/A
http://www.securitytracker.com/id?1020838secure@microsoft.com
N/A
http://www.us-cert.gov/cas/techalerts/TA08-253A.htmlsecure@microsoft.com
US Government Resource
http://www.vupen.com/english/advisories/2008/2520secure@microsoft.com
Vendor Advisory
http://www.vupen.com/english/advisories/2008/2696secure@microsoft.com
Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-08-055secure@microsoft.com
N/A
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052secure@microsoft.com
N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5881secure@microsoft.com
N/A
https://www.exploit-db.com/exploits/6619secure@microsoft.com
N/A
https://www.exploit-db.com/exploits/6716secure@microsoft.com
N/A
http://marc.info/?l=bugtraq&m=122235754013992&w=2af854a3a-2127-422b-91ae-364da2661108
N/A
http://secunia.com/advisories/32154af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.evilfingers.com/patchTuesday/MS08_052_GDI+_Vulnerability.txtaf854a3a-2127-422b-91ae-364da2661108
N/A
http://www.evilfingers.com/patchTuesday/MS08_052_GDI+_Vulnerability_ver2.txtaf854a3a-2127-422b-91ae-364da2661108
N/A
http://www.securityfocus.com/archive/1/496153/100/0/threadedaf854a3a-2127-422b-91ae-364da2661108
N/A
http://www.securityfocus.com/bid/31022af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.securitytracker.com/id?1020838af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.us-cert.gov/cas/techalerts/TA08-253A.htmlaf854a3a-2127-422b-91ae-364da2661108
US Government Resource
http://www.vupen.com/english/advisories/2008/2520af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.vupen.com/english/advisories/2008/2696af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-08-055af854a3a-2127-422b-91ae-364da2661108
N/A
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052af854a3a-2127-422b-91ae-364da2661108
N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5881af854a3a-2127-422b-91ae-364da2661108
N/A
https://www.exploit-db.com/exploits/6619af854a3a-2127-422b-91ae-364da2661108
N/A
https://www.exploit-db.com/exploits/6716af854a3a-2127-422b-91ae-364da2661108
N/A
Hyperlink: http://marc.info/?l=bugtraq&m=122235754013992&w=2
Source: secure@microsoft.com
Resource: N/A
Hyperlink: http://secunia.com/advisories/32154
Source: secure@microsoft.com
Resource:
Vendor Advisory
Hyperlink: http://www.evilfingers.com/patchTuesday/MS08_052_GDI+_Vulnerability.txt
Source: secure@microsoft.com
Resource: N/A
Hyperlink: http://www.evilfingers.com/patchTuesday/MS08_052_GDI+_Vulnerability_ver2.txt
Source: secure@microsoft.com
Resource: N/A
Hyperlink: http://www.securityfocus.com/archive/1/496153/100/0/threaded
Source: secure@microsoft.com
Resource: N/A
Hyperlink: http://www.securityfocus.com/bid/31022
Source: secure@microsoft.com
Resource: N/A
Hyperlink: http://www.securitytracker.com/id?1020838
Source: secure@microsoft.com
Resource: N/A
Hyperlink: http://www.us-cert.gov/cas/techalerts/TA08-253A.html
Source: secure@microsoft.com
Resource:
US Government Resource
Hyperlink: http://www.vupen.com/english/advisories/2008/2520
Source: secure@microsoft.com
Resource:
Vendor Advisory
Hyperlink: http://www.vupen.com/english/advisories/2008/2696
Source: secure@microsoft.com
Resource:
Vendor Advisory
Hyperlink: http://www.zerodayinitiative.com/advisories/ZDI-08-055
Source: secure@microsoft.com
Resource: N/A
Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052
Source: secure@microsoft.com
Resource: N/A
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5881
Source: secure@microsoft.com
Resource: N/A
Hyperlink: https://www.exploit-db.com/exploits/6619
Source: secure@microsoft.com
Resource: N/A
Hyperlink: https://www.exploit-db.com/exploits/6716
Source: secure@microsoft.com
Resource: N/A
Hyperlink: http://marc.info/?l=bugtraq&m=122235754013992&w=2
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://secunia.com/advisories/32154
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://www.evilfingers.com/patchTuesday/MS08_052_GDI+_Vulnerability.txt
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.evilfingers.com/patchTuesday/MS08_052_GDI+_Vulnerability_ver2.txt
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.securityfocus.com/archive/1/496153/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.securityfocus.com/bid/31022
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.securitytracker.com/id?1020838
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.us-cert.gov/cas/techalerts/TA08-253A.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
US Government Resource
Hyperlink: http://www.vupen.com/english/advisories/2008/2520
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://www.vupen.com/english/advisories/2008/2696
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://www.zerodayinitiative.com/advisories/ZDI-08-055
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5881
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: https://www.exploit-db.com/exploits/6619
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: https://www.exploit-db.com/exploits/6716
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Change History
0Changes found
Details not found