| Package | Affected versions | Patched versions |
|---|---|---|
| .net framework | = 1.0 | |
| digital image pro | = 7.0= 9 | |
| digital image suite | = 9 | |
| excel | = 2002= 2003 | |
| frontpage | = 2002= 2003 | |
| greetings | = 2002 | |
| infopath | = 2003 | |
| office | = 2003= xp | |
| onenote | = 2003 | |
| outlook | = 2002= 2003 | |
| picture it | = 2002= 7.0= 9 | |
| powerpoint | = 2002= 2003 | |
| project | = 2002= 2003 | |
| publisher | = 2002= 2003 | |
| visio | = 2002= 2003 | |
| visual basic | = 2002= 2003 | |
| visual c# | = 2002= 2003 | |
| visual c++ | = 2002= 2003 | |
| visual j# .net | = 2003 | |
| visual studio .net | = 2002= 2003 | |
| word | = 2002= 2003 |
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free