• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Microsoft GDI+ BMP Integer Overflow Vulnerability

Solution:
Microsoft has released an advisory and fixes to address this issue. Please see the references for more information.


Microsoft Digital Image Suite 2006

• Microsoft Vulnerabilities in Digital Image 2006 using GDI+ Could Allow Remote Code Execution (KB955992)
  http://www.microsoft.com/downloads/details.aspx?familyid=04afd760-8173 -4069-9e82-d3bf053d9eae&displaylang=en

Microsoft SQL Server 2005 Itanium Edition SP2

• Microsoft Security Update for SQL Server 2005 QFE Service Pack 2 (KB954607)
  http://www.microsoft.com/downloads/details.aspx?familyid=5148B887-F323 -4ADB-9721-61E1C0CFD213&displaylang=en


• Microsoft Security Update for SQL Server 2005 Service Pack 2 (KB954606)
  http://www.microsoft.com/downloads/details.aspx?familyid=4603C722-2468 -4ADB-B945-2ED0458B8F47&displaylang=en

Microsoft Report Viewer 2005 SP1

• Microsoft Microsoft Report Viewer Redistributable 2005 Service Pack 1
  http://www.microsoft.com/downloads/details.aspx?familyid=82833F27-081D -4B72-83EF-2836360A904D&displaylang=en

Microsoft Works 8.0

• Microsoft Security Update for Microsoft Works 8 (KB956483)
  http://www.microsoft.com/downloads/details.aspx?familyid=EB0D224E-A517 -40D9-9FC6-2345FA12A841&displaylang=en

Microsoft Report Viewer 2008 0

• Microsoft Microsoft Report Viewer Redistributable 2008
  http://www.microsoft.com/downloads/details.aspx?familyid=6AE0AA19-3E6C -474C-9D57-05B2347456B1&displaylang=en

Microsoft Visio 2002 SP2

• Microsoft Security Update for Visio 2002 (KB954479)
  http://www.microsoft.com/downloads/details.aspx?familyid=a6d9d3ef-f087 -4f61-9ec1-522b7d4b9c48&displaylang=en

Microsoft Office 2007 SP1

• Microsoft Security Update for Office 2007 (KB954326)
  http://www.microsoft.com/downloads/details.aspx?familyid=4b656fe8-6253 -490c-a81a-e4e8f0bb58d2&displaylang=en

Microsoft Office Compatibility Pack 2007 SP1

• Microsoft Security Update for Office 2007 (KB954326)
  http://www.microsoft.com/downloads/details.aspx?familyid=4b656fe8-6253 -490c-a81a-e4e8f0bb58d2&displaylang=en

Microsoft Office 2003 SP3

• Microsoft Security Update for Office 2003 (KB954478)
  http://www.microsoft.com/downloads/details.aspx?familyid=e9f8e309-d721 -4bab-b485-5eede8d49eb8&displaylang=en

Microsoft Office Compatibility Pack 2007 0

• Microsoft Security Update for Office 2007 (KB954326)
  http://www.microsoft.com/downloads/details.aspx?familyid=4b656fe8-6253 -490c-a81a-e4e8f0bb58d2&displaylang=en

Microsoft Forefront Client Security 1.0

• Microsoft Microsoft Forefront Security v 1.0 MS08-052 (KB 957177)
  http://www.microsoft.com/downloads/details.aspx?familyid=1EB1A79F-44CA -499E-90BB-AC51894E9D1E&displaylang=en

Microsoft SQL Server 2005 x64 Edition SP2

• Microsoft Security Update for SQL Server 2005 QFE Service Pack 2 (KB954607)
  http://www.microsoft.com/downloads/details.aspx?familyid=5148B887-F323 -4ADB-9721-61E1C0CFD213&displaylang=en


• Microsoft Security Update for SQL Server 2005 Service Pack 2 (KB954606)
  http://www.microsoft.com/downloads/details.aspx?familyid=4603C722-2468 -4ADB-B945-2ED0458B8F47&displaylang=en