PT-2008-4446 · Microsoft · Sql Server 2000+14

Published 2008-09-10 · Updated 2018-10-12 · CVE-2008-3015

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GDI+ in Microsoft Office XP SP3 GDI+ in Microsoft Office 2003 SP2 and SP3 GDI+ in 2007 Microsoft Office System Gold and SP1 GDI+ in Visio 2002 SP2 GDI+ in PowerPoint Viewer 2003 GDI+ in Works 8 GDI+ in Digital Image Suite 2006 GDI+ in SQL Server 2000 Reporting Services SP2 GDI+ in SQL Server 2005 SP2 GDI+ in Report Viewer 2005 SP1 and 2008 GDI+ in Forefront Client Security 1.0

Description A remote code execution issue exists in the way GDI+ handles integer calculations, allowing attackers to execute arbitrary code via a specially crafted BMP image file. This could enable an attacker to gain complete control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights. Users with limited account privileges may be less affected than those operating with administrative rights.

Recommendations For GDI+ in Microsoft Office XP SP3, update to a newer version that includes a fix for this issue. For GDI+ in Microsoft Office 2003 SP2 and SP3, update to a newer version that includes a fix for this issue. For GDI+ in 2007 Microsoft Office System Gold and SP1, update to a newer version that includes a fix for this issue. For GDI+ in Visio 2002 SP2, update to a newer version that includes a fix for this issue. For GDI+ in PowerPoint Viewer 2003, update to a newer version that includes a fix for this issue. For GDI+ in Works 8, update to a newer version that includes a fix for this issue. For GDI+ in Digital Image Suite 2006, update to a newer version that includes a fix for this issue. For GDI+ in SQL Server 2000 Reporting Services SP2, update to a newer version that includes a fix for this issue. For GDI+ in SQL Server 2005 SP2, update to a newer version that includes a fix for this issue. For GDI+ in Report Viewer 2005 SP1 and 2008, update to a newer version that includes a fix for this issue. For GDI+ in Forefront Client Security 1.0, update to a newer version that includes a fix for this issue. As a temporary workaround, consider avoiding the use of specially crafted BMP image files until a patch is available.

Exploit

Fix

RCE

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2008-3015

Affected Products

2007 Microsoft Office System

Digital Image Suite 2006

Forefront Client Security

Office 2003

Office Xp

Sql Server

Office

Office Visio

Powerpoint Viewer 2003

Report Viewer 2005

Report Viewer 2008

Sql Server 2000

Sql Server 2005

Visio 2002

Works 8

References · 18

• 🔥 https://exploit-db.com/exploits/6716 · Exploit
• 🔥 https://exploit-db.com/exploits/6619 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3015 · Security Note
• http://vupen.com/english/advisories/2008/2696 · Vendor Advisory
• http://vupen.com/english/advisories/2008/2520 · Vendor Advisory
• http://secunia.com/advisories/32154 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=122235754013992&w=2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-3015 · Security Note
• http://zerodayinitiative.com/advisories/ZDI-08-055 · Note
• http://securityfocus.com/bid/31022 · Note
• http://us-cert.gov/cas/techalerts/TA08-253A.html · Note
• http://evilfingers.com/patchTuesday/MS08_052_GDI+_Vulnerability.txt · Note
• http://securitytracker.com/id?1020838 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2008/MS08-052 · Note