• info
• discussion
• exploit
• solution
• references

Microsoft GDI+ CCITT G4 TIFF File Processing Memory Corruption Remote Code Execution Vulnerability

Solution:
The vendor has released updates and an advisory. Please see the references for details.


Microsoft SQL Server 2005 Itanium Edition SP2

• Microsoft Security Update for SQL Server 2005 Service Pack 2 (KB970895)
  http://www.microsoft.com/downloads/details.aspx?familyid=d971a262-1dfb -498c-a4f3-59fdc1b85d23


• Microsoft Security Update for SQL Server 2005 Service Pack 2 (KB970896)
  http://www.microsoft.com/downloads/details.aspx?familyid=76d3d653-e9a0 -48bc-afae-d3553f7b9235&displaylang=en

Microsoft Report Viewer 2005 SP1

• Microsoft Report Viewer Redistributable 2005 Service Pack 1 GDIPLUS.DLL Security Update (KB971117)
  http://www.microsoft.com/downloads/details.aspx?familyid=0dfaf300-2b53 -4678-a779-0d805ddfe538&displaylang=en

Microsoft Word Viewer 2003 SP3

• Microsoft Security Update for Microsoft Office 2003 (KB972580)
  http://www.microsoft.com/downloads/details.aspx?familyid=48752ab4-5928 -476d-a8bc-e998d188b1f7&displaylang=en

Microsoft Office XP SP1

• Microsoft Security Update for Microsoft Office XP (KB974811)
  http://www.microsoft.com/downloads/details.aspx?familyid=b4ac7fbe-dd19 -4940-a576-89a6b7ed602d&displaylang=en

Microsoft Visio 2002 Professional SP2

• Microsoft Security Update for Microsoft Visio 2002 (KB975365)
  http://www.microsoft.com/downloads/details.aspx?familyid=920ee70b-c5c1 -47b5-8f33-938ffe14eea4&displaylang=en

Microsoft Windows XP Tablet PC Edition SP2

• Microsoft Security Update for Windows XP (KB958869)
  http://www.microsoft.com/downloads/details.aspx?familyid=e2acde20-a6d3 -4135-b6eb-1214f743d474

Microsoft Windows XP Media Center Edition SP3

• Microsoft Security Update for Windows XP (KB958869)
  http://www.microsoft.com/downloads/details.aspx?familyid=e2acde20-a6d3 -4135-b6eb-1214f743d474

Microsoft Office 2007 SP2

• Microsoft Security Update for the 2007 Microsoft Office System (KB972581)
  http://www.microsoft.com/downloads/details.aspx?familyid=98d7c4ab-f8ca -4806-a609-453fb29b02ec&displaylang=en

Microsoft Word Viewer 2003 0

• Microsoft Security Update for Microsoft Office 2003 (KB972580)
  http://www.microsoft.com/downloads/details.aspx?familyid=48752ab4-5928 -476d-a8bc-e998d188b1f7&displaylang=en

Microsoft Office Compatibility Pack 2007 SP2

• Microsoft Security Update for the 2007 Microsoft Office System (KB972581)
  http://www.microsoft.com/downloads/details.aspx?familyid=98d7c4ab-f8ca -4806-a609-453fb29b02ec&displaylang=en

Microsoft Windows Server 2003 Web Edition SP2

• Microsoft Security Update for Windows Server 2003 (KB958869)
  http://www.microsoft.com/downloads/details.aspx?familyid=414466a4-39a0 -476d-9a43-ae7674cbd6a0

Microsoft Windows XP Professional x64 Edition SP2

• Microsoft Security Update for Windows XP x64 Edition (KB958869)
  http://www.microsoft.com/downloads/details.aspx?familyid=ad92503a-8c91 -4d73-98b0-942d7961637d

Microsoft Internet Explorer 6.0 SP1

• Microsoft Security Update for Internet Explorer 6 for Windows 2000 (KB958869)
  http://www.microsoft.com/downloads/details.aspx?familyid=f3fef608-dafb -4b37-a65a-9cc4ae8e2c4c

Microsoft SQL Server 2005 x64 Edition SP1

• Microsoft Security Update for SQL Server 2005 Service Pack 2 (KB970896)
  http://www.microsoft.com/downloads/details.aspx?familyid=76d3d653-e9a0 -48bc-afae-d3553f7b9235&displaylang=en

Microsoft Visio 2002 SP2

• Microsoft Security Update for Microsoft Visio 2002 (KB975365)
  http://www.microsoft.com/downloads/details.aspx?familyid=920ee70b-c5c1 -47b5-8f33-938ffe14eea4&displaylang=en

Microsoft SQL Server 2000 Reporting Services SP2

• Microsoft Security Update for SQL Server Reporting Services 2000 Service Pack 2 (KB970899)
  http://www.microsoft.com/downloads/details.aspx?familyid=33554f96-5af7 -4683-a537-9db293b67b8d

Microsoft PowerPoint Viewer 2007 SP2

• Microsoft Security Update for the 2007 Microsoft Office System (KB972581)
  http://www.microsoft.com/downloads/details.aspx?familyid=98d7c4ab-f8ca -4806-a609-453fb29b02ec&displaylang=en

Microsoft SQL Server 2005 Itanium Edition SP3

• Microsoft Security Update for SQL Server 2005 Service Pack 3 (KB970892)
  http://www.microsoft.com/downloads/details.aspx?familyid=0d878f4b-71e8 -4170-9a14-1bce684811ce&displaylang=en


• Microsoft Security Update for SQL Server 2005 Service Pack 3 (KB970894)
  http://www.microsoft.com/downloads/details.aspx?familyid=e6f307c1-8b21 -406e-9c6f-b1a3a1e9a98f&displaylang=en

Microsoft Visio 2002

• Microsoft Security Update for Microsoft Visio 2002 (KB975365)
  http://www.microsoft.com/downloads/details.aspx?familyid=920ee70b-c5c1 -47b5-8f33-938ffe14eea4&displaylang=en

Microsoft Office 2003 0

• Microsoft Security Update for Microsoft Office 2003 (KB972580)
  http://www.microsoft.com/downloads/details.aspx?familyid=48752ab4-5928 -476d-a8bc-e998d188b1f7&displaylang=en

Microsoft Office 2007 SP1

• Microsoft Security Update for the 2007 Microsoft Office System (KB972581)
  http://www.microsoft.com/downloads/details.aspx?familyid=98d7c4ab-f8ca -4806-a609-453fb29b02ec&displaylang=en

Microsoft Office Compatibility Pack 2007 SP1

• Microsoft Security Update for the 2007 Microsoft Office System (KB972581)
  http://www.microsoft.com/downloads/details.aspx?familyid=98d7c4ab-f8ca -4806-a609-453fb29b02ec&displaylang=en

Microsoft Office 2003 SP3

• Microsoft Security Update for Microsoft Office 2003 (KB972580)
  http://www.microsoft.com/downloads/details.aspx?familyid=48752ab4-5928 -476d-a8bc-e998d188b1f7&displaylang=en

Microsoft Office Compatibility Pack 2007 0

• Microsoft Security Update for the 2007 Microsoft Office System (KB972581)
  http://www.microsoft.com/downloads/details.aspx?familyid=98d7c4ab-f8ca -4806-a609-453fb29b02ec&displaylang=en

Microsoft Forefront Client Security 1.0

• Microsoft Microsoft Forefront Security v 1.0 MS09-062 (KB 975962)
  http://www.microsoft.com/downloads/details.aspx?familyid=c0ce624c-8df3 -4223-8a7a-5cba4ac334a8&displaylang=en

Microsoft Windows Server 2003 Standard Edition SP2

• Microsoft Security Update for Windows Server 2003 (KB958869)
  http://www.microsoft.com/downloads/details.aspx?familyid=414466a4-39a0 -476d-9a43-ae7674cbd6a0

Microsoft Project 2002

• Microsoft Security Update for Microsoft Office XP (KB974811)
  http://www.microsoft.com/downloads/details.aspx?familyid=b4ac7fbe-dd19 -4940-a576-89a6b7ed602d&displaylang=en