Test ID:	1.3.6.1.4.1.25623.1.0.900878
Category:	Windows : Microsoft Bulletins
Title:	Microsoft Products GDI Plus Code Execution Vulnerabilities (957488)
Summary:	This host is missing a critical security update according to; Microsoft Bulletin MS09-062.
Description:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS09-062. Vulnerability Insight: These issues are caused by memory corruptions, integer, heap and buffer overflows, and input validation errors in GDI+ when rendering malformed WMF, PNG, TIFF and BMP images, or when processing Office Art Property Tables in Office documents. Vulnerability Impact: Successful exploitation could allow attackers to crash an affected application or execute arbitrary code. Affected Software/OS: - Microsoft SQL Server 2005 SP 2/3 - Microsoft Office Excel Viewer 2007 - Microsoft Office XP/2003 SP 3 and prior - Microsoft Office Visio 2002 SP 2 and prior - Microsoft Office Groove 2007 SP1 and prior - Microsoft Excel Viewer 2003 SP 3 and prior - Microsoft Office 2007 System SP 1/2 and prior - Microsoft Office Word Viewer 2003 SP 3 and prior - Microsoft Office Visio Viewer 2007 SP 2 and prior - Microsoft Office PowerPoint Viewer 2007 SP 2 and prior - Microsoft Visual Studio 2008 SP 1 and prior - Microsoft Visual Studio .NET 2003 SP 1 and prior - Microsoft Windows 2000 SP4 with Internet Explorer 6 SP 1 - Microsoft Office Compatibility Pack for Word/Excel/PowerPoint 2007 File Formats SP 1/2 Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2500 Cert/CC Advisory: TA09-286A http://www.us-cert.gov/cas/techalerts/TA09-286A.html Microsoft Security Bulletin: MS09-062 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5967 Common Vulnerability Exposure (CVE) ID: CVE-2009-2501 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5800 Common Vulnerability Exposure (CVE) ID: CVE-2009-2502 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5898 Common Vulnerability Exposure (CVE) ID: CVE-2009-2503 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6491 Common Vulnerability Exposure (CVE) ID: CVE-2009-2504 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6282 Common Vulnerability Exposure (CVE) ID: CVE-2009-2518 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6430 Common Vulnerability Exposure (CVE) ID: CVE-2009-2528 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6426 Common Vulnerability Exposure (CVE) ID: CVE-2009-3126 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6134
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.