| Package | Affected versions | Patched versions |
|---|---|---|
| .net framework | = 1.1= 2.0 | |
| excel viewer | = 2003 | |
| expression web | = 2 | |
| forefront client security | = 1.0 | |
| internet explorer | = 6 | |
| office | = 2003= 2007= xp | |
| office compatibility pack | = 2007 | |
| office groove | = 2007 | |
| office powerpoint viewer | = 2007 | |
| project | = 2002 | |
| report viewer | = 2005= 2008 | |
| sql server | = 2005 | |
| sql server reporting services | = 2000 | |
| visio | = 2002 | |
| visual foxpro | = 8.0= 9.0 | |
| visual studio | = 2008 | |
| visual studio .net | = 2003= 2005 | |
| word viewer | = 2003 | |
| works | = 8.5 |
GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Memory Corruption Vulnerability."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free