Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

15 records

Priority MEDIUM 59

GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corrupt…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.20452 Published 2009-10-14 No fix listed CWE-94
Priority MEDIUM 59

Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 and SP3, Windows Server 2003 SP2, Vista Gold and SP1, Server 2008 Gold, Office XP…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.20982 Published 2009-10-14 No fix listed CWE-189
Priority MEDIUM 62

Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office W…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.26715 Published 2009-10-14 No fix listed CWE-119
Priority HIGH 72

gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.52065 Published 2008-09-10 No fix listed CWE-399
Priority MEDIUM 64

gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.31037 Published 2008-09-10 No fix listed CWE-119
Priority LOW 37

Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (disk spa…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.12938 Published 2008-05-13 No fix listed CWE-399
Priority LOW 37

Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (engine h…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.12938 Published 2008-05-13 No fix listed CWE-399