Microsoft GDI+ BMP Integer Overflow Vulnerability

Bugtraq ID: 31022
Class: Boundary Condition Error
CVE: CVE-2008-3015
Remote: Yes
Local: No
Published: Sep 09 2008 12:00AM
Updated: Apr 01 2009 08:36PM
Credit: An anonymous researcher working with Zero Day Initiative
Vulnerable: Symantec Backup Exec for Windows Servers 12.0
Symantec Backup Exec for Windows Servers 11d
Research In Motion Blackberry Unite! 1.0.1 bundle 36
Research In Motion Blackberry Unite! 1.0.1
Research In Motion Blackberry Unite! 1.0
Research In Motion Blackberry Professional Software 4.1.4
Research In Motion Blackberry Enterprise Server 4.1.6
Research In Motion Blackberry Enterprise Server 4.1.5
Research In Motion Blackberry Enterprise Server 4.1.4
Research In Motion Blackberry Enterprise Server 4.1.3
Research In Motion Blackberry Enterprise Server 4.0.3
Nortel Networks Self-Service WVADS 0
Nortel Networks Self-Service Speech Server 0
Nortel Networks Self-Service Peri Workstation 0
Nortel Networks Self-Service Peri Application 0
Nortel Networks Self-Service MPS 500 0
Nortel Networks Self-Service MPS 1000 0
Nortel Networks Self-Service MPS 100 0
Nortel Networks Self-Service - CCSS7 0
Nortel Networks Self Service VoiceXML 0
Nortel Networks Media Processing Svr 500 Rel 3.0
Nortel Networks Media Processing Svr 1000 Rel 3.0
Nortel Networks Media Processing Svr 100 0
Nortel Networks ENSM- Enterprise NMS 0
Nortel Networks ENSM - Enterprise NMS 10.5
Nortel Networks ENSM - Enterprise NMS 10.4
Nortel Networks Contact Center NCC 0
Nortel Networks Contact Center Manager Server 0
Nortel Networks Contact Center Manager
Nortel Networks Contact Center Express
Nortel Networks Contact Center Administration 0
Nortel Networks Contact Center - TAPI Server 0
Nortel Networks CallPilot 703t
Nortel Networks CallPilot 702t
Nortel Networks CallPilot 201i
Nortel Networks CallPilot 200i
Nortel Networks CallPilot 1002rp
Microsoft Works 8.0
Microsoft Visio 2002 SP2
Microsoft SQL Server 2005 x64 Edition SP2
Microsoft SQL Server 2005 x64 Edition SP1
Microsoft SQL Server 2005 Itanium Edition SP2
Microsoft SQL Server 2005 Itanium Edition SP1
Microsoft SQL Server 2005 Itanium Edition 0
Microsoft SQL Server 2005 0
Microsoft SQL Server 2000
- Microsoft Windows 2000 Professional SP2
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0
Microsoft Report Viewer 2008 0
Microsoft Report Viewer 2005 SP1
Microsoft Project 2002 SP1
Microsoft Project 2002 0
Microsoft PowerPoint Viewer 2007 SP1
Microsoft PowerPoint Viewer 2007 0
Microsoft PowerPoint Viewer 2003 0
Microsoft Office Word 2003 Viewer SP3
Microsoft Office Word 2003 Viewer 0
Microsoft Office Excel Viewer 2003 SP3
Microsoft Office Compatibility Pack 2007 SP1
Microsoft Office Compatibility Pack 2007 0
Microsoft Office 2007 SP1
Microsoft Office 2007 0
Microsoft Office 2003 SP3
Microsoft Office 2003 SP2
Microsoft Office 2003 SP1
Microsoft Office 2003 0
+ Microsoft Excel 2003
+ Microsoft FrontPage 2003
+ Microsoft InfoPath 2003
+ Microsoft OneNote 2003 0
+ Microsoft Outlook 2003 0
+ Microsoft PowerPoint 2003 0
+ Microsoft Publisher 2003
Microsoft Groove 2007 SP1
Microsoft Groove 2007 0
Microsoft Forefront Client Security 1.0
Microsoft Expression Web 2
Microsoft Expression Web 0
Microsoft Excel Viewer 2007 0
Microsoft Excel Viewer 2003 SP3
Microsoft Excel Viewer 2003 0
Microsoft Excel Viewer 0
Microsoft Digital Image Suite 2006
HP Storage Management Appliance III
HP Storage Management Appliance II
HP Storage Management Appliance I
HP Storage Management Appliance 2.1
+ HP Storage Management Appliance III
+ HP Storage Management Appliance II
+ HP Storage Management Appliance I
Hitachi JP1/VERITAS Backup Exec 12 (Windows) 08-52
Hitachi JP1/VERITAS Backup Exec 12 (Windows) 08-51
Hitachi JP1/VERITAS Backup Exec 12 (Windows) 08-50
Hitachi JP1/VERITAS Backup Exec 11d (Windows) 08-05
Hitachi JP1/VERITAS Backup Exec 11d (Windows) 08-04
Hitachi JP1/VERITAS Backup Exec 11d (Windows) 08-03
Hitachi JP1/VERITAS Backup Exec 11d (Windows) 08-02
Hitachi JP1/VERITAS Backup Exec 11d (Windows) 08-01
Hitachi JP1/VERITAS Backup Exec 11d (Windows) 08-00
Not Vulnerable: Symantec Backup Exec for Windows Servers 12 SP3
Symantec Backup Exec for Windows Servers 11d SP4
Symantec Backup Exec for Windows Server 12.5


 

Privacy Statement
Copyright 2010, SecurityFocus