Technical Description

Multiple vulnerabilities have been identified in various Microsoft products, which could be exploited by attackers to compromise a vulnerable system. These issues are caused by memory corruptions, integer, heap and buffer overflows, and input validation errors in GDI+ when rendering malformed WMF, PNG, TIFF and BMP images, or when processing Office Art Property Tables in Office documents, which could allow attackers to crash an affected application or execute arbitrary code.

Affected Products

Microsoft Windows 2000 Service Pack 4
Microsoft Windows XP Service Pack 2
Microsoft Windows XP Service Pack 3
Microsoft Windows XP Professional x64 Edition Service Pack 2
Microsoft Windows Server 2003 Service Pack 2
Microsoft Windows Server 2003 x64 Edition Service Pack 2
Microsoft Windows Server 2003 SP2 (Itanium)
Microsoft Windows Vista
Microsoft Windows Vista Service Pack 1
Microsoft Windows Vista x64 Edition
Microsoft Windows Vista x64 Edition Service Pack 1
Microsoft Windows Server 2008 (32-bit)
Microsoft Windows Server 2008 (x64)
Microsoft Windows Server 2008 (Itanium)
Microsoft Internet Explorer 6 Service Pack 1
Microsoft .NET Framework 1.1 Service Pack 1
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft Office XP Service Pack 3
Microsoft Office 2003 Service Pack 3
2007 Microsoft Office System Service Pack 1
2007 Microsoft Office System Service Pack 2
Microsoft Office Project 2002 Service Pack 1
Microsoft Office Visio 2002 Service Pack 2
Microsoft Office Word Viewer
Microsoft Word Viewer 2003
Microsoft Word Viewer 2003 Service Pack 3
Microsoft Office Excel Viewer 2003
Microsoft Office Excel Viewer 2003 Service Pack 3
Microsoft Office Excel Viewer, PowerPoint Viewer 2007
Microsoft PowerPoint Viewer 2007 Service Pack 1
Microsoft PowerPoint Viewer 2007 Service Pack 2
Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Service Pack 1
Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Service Pack 2
Microsoft Expression Web and Microsoft Expression Web 2
Microsoft Office Groove 2007 and Microsoft Office Groove 2007 Service Pack 1
Microsoft Works 8.5
Microsoft SQL Server 2000 Reporting Services Service Pack 2
Microsoft SQL Server 2005 Service Pack 2
Microsoft SQL Server 2005 x64 Edition Service Pack 2
Microsoft SQL Server 2005 for Itanium-based Systems Service Pack 2
Microsoft SQL Server 2005 Service Pack 3
Microsoft SQL Server 2005 x64 Edition Service Pack 3
Microsoft SQL Server 2005 for Itanium-based Systems Service Pack 3
Microsoft Visual Studio .NET 2003 Service Pack 1
Microsoft Visual Studio 2005 Service Pack 1
Microsoft Visual Studio 2008
Microsoft Visual Studio 2008 Service Pack 1
Microsoft Report Viewer 2005 Service Pack 1 Redistributable Package
Microsoft Report Viewer 2008 Redistributable Package
Microsoft Report Viewer 2008 Redistributable Package Service Pack 1
Microsoft Visual FoxPro 8.0 Service Pack 1 when installed on Microsoft Windows 2000 Service Pack 4
Microsoft Visual FoxPro 9.0 Service Pack 2 when installed on Microsoft Windows 2000 Service Pack 4
Microsoft Platform SDK Redistributable: GDI+
Microsoft Forefront Client Security 1.0

Solution

Apply patches :
http://www.microsoft.com/technet/security/bulletin/MS09-062.mspx

References

http://www.vupen.com/english/advisories/2009/2897
http://www.microsoft.com/technet/security/bulletin/MS09-062.mspx

Credits

Vulnerabilities reported by Yamata Li (Palo Alto Networks), Thomas Garnier (SkyRecon), Wushi via VeriSign iDefense Labs, Ivan Fratric via ZDI, Tavis Ormandy (Google Inc.), Carlo Di Dato, Marsu Pilami via VeriSign iDefense Labs, and Carsten H. Eiram (Secunia).

ChangeLog

2009-10-13 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts with CVE, CWE, and CVSS when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.