CVE-2008-3014 in Office
摘要
由 VulDB • 2026-06-23
Microsoft GDI+ 中的 gdiplus.dll 存在缓冲区溢出漏洞。该漏洞允许远程攻击者通过触发不当内存分配的畸形 WMF 图像文件执行任意代码，影响 Microsoft Internet Explorer 6 SP1、Windows XP SP2/SP3、Server 2003 SP1/SP2、Vista Gold/SP1、Server 2008、Office XP SP3、Office 2003 SP2/SP3、Microsoft Office System 2007 Gold/SP1、Visio 2002 SP2、PowerPoint Viewer 2003、Works 8、Digital Image Suite 2006、SQL Server 2000 Reporting Services SP2、SQL Server 2005 SP2、Report Viewer 2005 SP1/2008 以及 Forefront Client Security 1.0。此漏洞也被称为“GDI+ WMF 缓冲区溢出漏洞”。
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.