CVE-2012-0167 Heap-based buffer overflow in the Office GDI+ library in Microsoft Office 2003 SP3 and 2007 SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted EMF image in an Office document,...
HighCVSS 9.3
EPSS 29.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the Office GDI+ library in Microsoft Office 2003 SP3 and 2007 SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted EMF image in an Office document, aka "GDI+ Heap Overflow Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office | = 2003-sp3 | No fix listed |
| Microsoft office | = 2007-sp2 | No fix listed |
| Microsoft office | = 2007-sp3 | No fix listed |
References
- 49121 third-party-advisory
- 53351 vdb-entry
- 1027038 vdb-entry
- TA12-129A third-party-advisory us-government-resource
- MS12-034 vendor-advisory
- windows-gdi-emf-bo(75126) vdb-entry
- oval:org.mitre.oval:def:15628 signature vdb-entry