CVE-2009-2502 in Internet Explorer
Riassunto
di VulDB • 07/07/2026
Un buffer overflow in GDI+ presente in Microsoft Internet Explorer 6 SP1, Windows XP SP2 e SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 e SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold e SP3, Office Excel Viewer 2003 Gold e SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1 e SP2, Office Compatibility Pack per i formati di file Word, Excel e PowerPoint 2007 SP1 e SP2, Expression Web, Expression Web 2, Groove 2007 Gold e SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 e SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold e SP1, e Forefront Client Security 1.0 consente agli attaccanti remoti di eseguire codice arbitrario tramite un file immagine TIFF creato ad hoc, noto come "Vulnerabilità GDI+ Buffer Overflow TIFF".
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.