• info
• discussion
• exploit
• solution
• references

Microsoft GDI+ .NET Framework Remote Code Execution Vulnerability

Solution:
The vendor has released updates and an advisory. Please see the references for details.


Microsoft Windows Vista Home Premium 64-bit edition 0

• Microsoft Security Update for Windows Vista for x64-based Systems (KB938464)
  http://www.microsoft.com/downloads/details.aspx?familyid=aa47d016-f5c9 -4586-8876-f1f4f255f54d&displaylang=en

Microsoft SQL Server 2005 Itanium Edition SP2

• Microsoft Security Update for SQL Server 2005 Service Pack 2 (KB970895)
  http://www.microsoft.com/downloads/details.aspx?familyid=d971a262-1dfb -498c-a4f3-59fdc1b85d23


• Microsoft Security Update for SQL Server 2005 Service Pack 2 (KB970896)
  http://www.microsoft.com/downloads/details.aspx?familyid=76d3d653-e9a0 -48bc-afae-d3553f7b9235&displaylang=en

Microsoft Report Viewer 2005 SP1

• Microsoft Report Viewer Redistributable 2005 Service Pack 1 GDIPLUS.DLL Security Update (KB971117)
  http://www.microsoft.com/downloads/details.aspx?familyid=0dfaf300-2b53 -4678-a779-0d805ddfe538&displaylang=en

Microsoft Word Viewer 2003 SP3

• Microsoft Security Update for Microsoft Office 2003 (KB972580)
  http://www.microsoft.com/downloads/details.aspx?familyid=48752ab4-5928 -476d-a8bc-e998d188b1f7&displaylang=en

Microsoft Office XP SP1

• Microsoft Security Update for Microsoft Office XP (KB974811)
  http://www.microsoft.com/downloads/details.aspx?familyid=b4ac7fbe-dd19 -4940-a576-89a6b7ed602d&displaylang=en

Microsoft .NET Framework 1.1 SP1

• Microsoft .NET Framework 1.1 Service Pack 1 GDIPLUS.DLL Security Update for Windows 2000
  http://www.microsoft.com/downloads/details.aspx?FamilyId=ecf78619-80fa -417d-852b-1b5b2cf574e2

Microsoft Windows Vista Home Basic SP1

• Microsoft Security Update for Windows Vista (KB958869)
  http://www.microsoft.com/downloads/details.aspx?familyid=19aa01f3-026d -4264-85f8-216d0597969b

Microsoft Visio 2002 Professional SP2

• Microsoft Security Update for Microsoft Visio 2002 (KB975365)
  http://www.microsoft.com/downloads/details.aspx?familyid=920ee70b-c5c1 -47b5-8f33-938ffe14eea4&displaylang=en

Microsoft Windows Vista Home Premium 64-bit edition SP1

• Microsoft Security Update for Windows Vista for x64-based Systems (KB938464)
  http://www.microsoft.com/downloads/details.aspx?familyid=aa47d016-f5c9 -4586-8876-f1f4f255f54d&displaylang=en

Microsoft Office 2007 SP2

• Microsoft Security Update for the 2007 Microsoft Office System (KB972581)
  http://www.microsoft.com/downloads/details.aspx?familyid=98d7c4ab-f8ca -4806-a609-453fb29b02ec&displaylang=en

Microsoft Word Viewer 2003 0

• Microsoft Security Update for Microsoft Office 2003 (KB972580)
  http://www.microsoft.com/downloads/details.aspx?familyid=48752ab4-5928 -476d-a8bc-e998d188b1f7&displaylang=en

Microsoft Office Compatibility Pack 2007 SP2

• Microsoft Security Update for the 2007 Microsoft Office System (KB972581)
  http://www.microsoft.com/downloads/details.aspx?familyid=98d7c4ab-f8ca -4806-a609-453fb29b02ec&displaylang=en

Microsoft Windows Server 2003 Web Edition SP2

• Microsoft Security Update for Windows Server 2003 (KB958869)
  http://www.microsoft.com/downloads/details.aspx?familyid=414466a4-39a0 -476d-9a43-ae7674cbd6a0

Microsoft Windows Vista Enterprise

• Microsoft Security Update for Windows Vista (KB958869)
  http://www.microsoft.com/downloads/details.aspx?familyid=19aa01f3-026d -4264-85f8-216d0597969b

Microsoft Windows XP Professional x64 Edition SP2

• Microsoft Security Update for Windows XP x64 Edition (KB958869)
  http://www.microsoft.com/downloads/details.aspx?familyid=ad92503a-8c91 -4d73-98b0-942d7961637d

Microsoft Windows Vista Ultimate 64-bit edition SP1

• Microsoft Security Update for Windows Vista for x64-based Systems (KB938464)
  http://www.microsoft.com/downloads/details.aspx?familyid=aa47d016-f5c9 -4586-8876-f1f4f255f54d&displaylang=en

Microsoft SQL Server 2005 x64 Edition SP1

• Microsoft Security Update for SQL Server 2005 Service Pack 2 (KB970896)
  http://www.microsoft.com/downloads/details.aspx?familyid=76d3d653-e9a0 -48bc-afae-d3553f7b9235&displaylang=en

Microsoft Visio 2002 SP2

• Microsoft Security Update for Microsoft Visio 2002 (KB975365)
  http://www.microsoft.com/downloads/details.aspx?familyid=920ee70b-c5c1 -47b5-8f33-938ffe14eea4&displaylang=en

Microsoft Windows Vista x64 Edition SP1

• Microsoft Security Update for Windows Vista for x64-based Systems (KB938464)
  http://www.microsoft.com/downloads/details.aspx?familyid=aa47d016-f5c9 -4586-8876-f1f4f255f54d&displaylang=en

Microsoft SQL Server 2000 Reporting Services SP2

• Microsoft Security Update for SQL Server Reporting Services 2000 Service Pack 2 (KB970899)
  http://www.microsoft.com/downloads/details.aspx?familyid=33554f96-5af7 -4683-a537-9db293b67b8d

Microsoft PowerPoint Viewer 2007 SP2

• Microsoft Security Update for the 2007 Microsoft Office System (KB972581)
  http://www.microsoft.com/downloads/details.aspx?familyid=98d7c4ab-f8ca -4806-a609-453fb29b02ec&displaylang=en

Microsoft SQL Server 2005 Itanium Edition SP3

• Microsoft Security Update for SQL Server 2005 Service Pack 3 (KB970892)
  http://www.microsoft.com/downloads/details.aspx?familyid=0d878f4b-71e8 -4170-9a14-1bce684811ce&displaylang=en


• Microsoft Security Update for SQL Server 2005 Service Pack 3 (KB970894)
  http://www.microsoft.com/downloads/details.aspx?familyid=e6f307c1-8b21 -406e-9c6f-b1a3a1e9a98f&displaylang=en

Microsoft .NET Framework 2.0 SP2

• Microsoft .NET Framework 2.0 Service Pack 2 GDIPLUS.DLL Security Update for Windows 2000
  http://www.microsoft.com/downloads/details.aspx?familyid=e6f5e730-85cc -4c08-a50d-c456b1e9f5bc

Microsoft Windows Server 2008 for x64-based Systems 0

• Microsoft Security Update for Windows Server 2008 x64 Edition (KB958869)
  http://www.microsoft.com/downloads/details.aspx?familyid=41bc4cdb-273a -4a6e-80d9-c8ce20e32da9

Microsoft Visio 2002

• Microsoft Security Update for Microsoft Visio 2002 (KB975365)
  http://www.microsoft.com/downloads/details.aspx?familyid=920ee70b-c5c1 -47b5-8f33-938ffe14eea4&displaylang=en

Microsoft Office 2003 0

• Microsoft Security Update for Microsoft Office 2003 (KB972580)
  http://www.microsoft.com/downloads/details.aspx?familyid=48752ab4-5928 -476d-a8bc-e998d188b1f7&displaylang=en

Microsoft Windows Vista Home Basic

• Microsoft Security Update for Windows Vista (KB958869)
  http://www.microsoft.com/downloads/details.aspx?familyid=19aa01f3-026d -4264-85f8-216d0597969b

Microsoft Office 2007 SP1

• Microsoft Security Update for the 2007 Microsoft Office System (KB972581)
  http://www.microsoft.com/downloads/details.aspx?familyid=98d7c4ab-f8ca -4806-a609-453fb29b02ec&displaylang=en

Microsoft Office Compatibility Pack 2007 SP1

• Microsoft Security Update for the 2007 Microsoft Office System (KB972581)
  http://www.microsoft.com/downloads/details.aspx?familyid=98d7c4ab-f8ca -4806-a609-453fb29b02ec&displaylang=en

Microsoft Office 2003 SP3

• Microsoft Security Update for Microsoft Office 2003 (KB972580)
  http://www.microsoft.com/downloads/details.aspx?familyid=48752ab4-5928 -476d-a8bc-e998d188b1f7&displaylang=en

Microsoft Windows Vista Ultimate

• Microsoft Security Update for Windows Vista (KB958869)
  http://www.microsoft.com/downloads/details.aspx?familyid=19aa01f3-026d -4264-85f8-216d0597969b

Microsoft Windows Vista Home Premium SP1

• Microsoft Security Update for Windows Vista (KB958869)
  http://www.microsoft.com/downloads/details.aspx?familyid=19aa01f3-026d -4264-85f8-216d0597969b

Microsoft Office Compatibility Pack 2007 0

• Microsoft Security Update for the 2007 Microsoft Office System (KB972581)
  http://www.microsoft.com/downloads/details.aspx?familyid=98d7c4ab-f8ca -4806-a609-453fb29b02ec&displaylang=en

Microsoft Forefront Client Security 1.0

• Microsoft Microsoft Forefront Security v 1.0 MS09-062 (KB 975962)
  http://www.microsoft.com/downloads/details.aspx?familyid=c0ce624c-8df3 -4223-8a7a-5cba4ac334a8&displaylang=en

Microsoft Windows Server 2003 Standard Edition SP2

• Microsoft Security Update for Windows Server 2003 (KB958869)
  http://www.microsoft.com/downloads/details.aspx?familyid=414466a4-39a0 -476d-9a43-ae7674cbd6a0

Microsoft Project 2002

• Microsoft Security Update for Microsoft Office XP (KB974811)
  http://www.microsoft.com/downloads/details.aspx?familyid=b4ac7fbe-dd19 -4940-a576-89a6b7ed602d&displaylang=en

Microsoft Visio Viewer 2007 0

• Microsoft Security Update for the 2007 Microsoft Office System (KB972581)
  http://www.microsoft.com/downloads/details.aspx?familyid=98d7c4ab-f8ca -4806-a609-453fb29b02ec&displaylang=en

Microsoft Windows Server 2003 Itanium SP2

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB958869)
  http://www.microsoft.com/downloads/details.aspx?familyid=a678ceb9-a37a -4c29-8bd1-f209922990e5

Microsoft Visio Viewer 2007 0

• Microsoft Security Update for the 2007 Microsoft Office System (KB972581)
  http://www.microsoft.com/downloads/details.aspx?familyid=98d7c4ab-f8ca -4806-a609-453fb29b02ec&displaylang=en

Microsoft Office XP SP2

• Microsoft Security Update for Microsoft Office XP (KB974811)
  http://www.microsoft.com/downloads/details.aspx?familyid=b4ac7fbe-dd19 -4940-a576-89a6b7ed602d&displaylang=en

Microsoft Visual Studio 2008 0

• Microsoft Visual Studio 2008 GDIPLUS.DLL Security Update
  http://www.microsoft.com/downloads/details.aspx?familyid=4fa10c93-ce20 -43df-a725-ef4c77353747&displaylang=en

Microsoft Visual FoxPro 8.0 SP1

• Microsoft Visual FoxPro 8.0 Service Pack 1 GDIPLUS.DLL Security Update (KB971104)
  http://www.microsoft.com/downloads/details.aspx?familyid=e5d0d515-4b36 -4025-bc6f-1c5cdf09e1af&displaylang=en