← Database

CVE-2009-2518

CRITICAL CVSS: 9.3 Published: 2009-10-14 Modified: 2026-06-16

Description

Integer overflow in GDI+ in Microsoft Office XP SP3 allows remote attackers to execute arbitrary code via an Office document with a bitmap (aka BMP) image that triggers memory corruption, aka "Office BMP Integer Overflow Vulnerability."

Affected Platforms

Microsoft Office

Weakness Type

CWE-189

References