CVE-2009-2528
No fix known EPSS 20%
GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Memory Corruption Vulnerability."
Products: microsoft windows_2003_server, microsoft windows_server_2008, microsoft windows_vista, microsoft windows_xp, microsoft .net_framework, microsoft internet_explorer, microsoft report_viewer, microsoft sql_server, microsoft sql_server_reporting_services, microsoft excel_viewer, microsoft expression_web, microsoft office, microsoft office_compatibility_pack, microsoft office_excel_viewer, microsoft office_groove, microsoft office_powerpoint_viewer, microsoft office_word_viewer, microsoft project, microsoft visio, microsoft word_viewer, microsoft works, microsoft platform_sdk, microsoft visual_studio, microsoft visual_studio_.net, microsoft forefront_client_security, microsoft visual_foxpro