KB957488 - MS09-062: Vulnerabilities in GDI+ could allow remote code execution

2020-10-2007:11:43

Microsoft

support.microsoft.com

249

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

JSON

<html><body><p>Resolves vulnerabilities in Microsoft Windows GDI+ that could allow remote code execution if a user viewed a specially crafted image file using affected software or browsed a Web site that contains specially crafted content.</p><h2></h2><div><span>Support for Windows Vista Service Pack 1 (SP1) ends on July 12, 2011. To continue receiving security updates for Windows, make sure you’re running Windows Vista with Service Pack 2 (SP2). For more information, refer to this Microsoft web page: <a href=“http://windows.microsoft.com/en-us/windows/help/end-support-windows-xp-sp2-windows-vista-without-service-packs” target=“_self”>Support is ending for some versions of Windows</a></span>.</div><h2></h2><div><span>Support for Windows Vista Service Pack 1 (SP1) ends on July 12, 2011. To continue receiving security updates for Windows, make sure you’re running Windows Vista with Service Pack 2 (SP2). For more information, refer to this Microsoft web page: <a href=“http://windows.microsoft.com/en-us/windows/help/end-support-windows-xp-sp2-windows-vista-without-service-packs” target=“_self”>Support is ending for some versions of Windows</a></span>.</div><h2>INTRODUCTION</h2><div>Microsoft has released security bulletin MS09-062. To view the complete security bulletin, visit one of the following Microsoft Web sites:<br /><br /><ul><li>Home users:<br /><div><a href=“http://www.microsoft.com/security/updates/bulletins/200910.aspx” target=“_self”>http://www.microsoft.com/security/updates/bulletins/200910.aspx</a></div><span>Skip the details</span>: Download the updates for your home computer or laptop from the Microsoft Update Web site now:<br /><div><a href=“http://update.microsoft.com/microsoftupdate/” target=“_self”>http://update.microsoft.com/microsoftupdate/</a></div></li><li>IT professionals:<br /><div><a href=“http://www.microsoft.com/technet/security/bulletin/ms09-062.mspx” target=“_self”>http://www.microsoft.com/technet/security/bulletin/MS09-062.mspx</a></div></li></ul><span><h3>How to obtain help and support for this security update</h3> <br />Help installing updates: <br /><a href=“https://support.microsoft.com/ph/6527” target=“_self”>Support for Microsoft Update</a><br /><br />Security solutions for IT professionals: <br /><a href=“http://technet.microsoft.com/security/bb980617.aspx” target=“_self”>TechNet Security Troubleshooting and Support</a><br /><br />Help protect your computer that is running Windows from viruses and malware:<br /><a href=“https://support.microsoft.com/contactus/cu_sc_virsec_master” target=“_self”>Virus Solution and Security Center</a><br /><br />Local support according to your country: <br /><a href=“https://support.microsoft.com/common/international.aspx” target=“_self”>International Support</a><br /><br /></span></div><h2>More Information</h2><div><h3>Known issues and additional information about this security update</h3><span>For more information about this security update and for information about any known issues with specific releases of this software, click the following article number to view the article in the Microsoft Knowledge Base:<br /><br /><div><a href=“https://support.microsoft.com/en-us/help/958869”>958869 </a> MS09-062: Description of the security update for GDI+ for all editions of Windows XP, Windows Vista, Windows Server 2003, and Windows Server 2008 and for Windows Server 2000 with Internet Explorer 6 Service Pack 1: October 13, 2009<br /><br /></div></span><span><div><a href=“https://support.microsoft.com/en-us/help/970892”>970892 </a> MS09-062: Description of the security update for SQL Server 2005 Service Pack 3 GDR: October 13, 2009<br /><br /></div></span><span><div><a href=“https://support.microsoft.com/en-us/help/970894”>970894 </a>MS09-062: Description of the security update for SQL Server 2005 Service Pack 3 QFE: October 13, 2009<br /></div></span><span><div><a href=“https://support.microsoft.com/en-us/help/970895”>970895 </a>MS09-062: Description of the security update for GDI+ for SQL Server 2005 Service Pack 2 GDR: October 13, 2009<br /></div></span><span><div><a href=“https://support.microsoft.com/en-us/help/970896”>970896 </a>MS09-062: Description of the security update for SQL Server 2005 Service Pack 2 QFE: October 13, 2009<br /></div></span><span><div><a href=“https://support.microsoft.com/en-us/help/970899”>970899 </a>MS09-062: Description of the security update for GDI+ for SQL Server 2000 Reporting Services Service Pack 2: October 13, 2009<br /></div></span><span><div><a href=“https://support.microsoft.com/en-us/help/971022”>971022 </a> MS09-062: Description of the security update for Microsoft Visual Studio 2003 Service Pack 1: October 13, 2009<br /><br /></div></span><span><div><a href=“https://support.microsoft.com/en-us/help/971023”>971023 </a> MS09-062: Description of the security update for Microsoft Visual Studio 2005 Service Pack 1: October 13, 2009<br /><br /></div></span><span><div><a href=“https://support.microsoft.com/en-us/help/971104”>971104 </a> MS09-062: Description of the security update for Microsoft Visual FoxPro 8.0 Service Pack 1: October 13, 2009<br /><br /></div></span><span><div><a href=“https://support.microsoft.com/en-us/help/971105”>971105 </a> MS09-062: Description of the security update for Microsoft Visual FoxPro 9.0 Service Pack 2: October 13, 2009<br /><br /></div></span><span><div><a href=“https://support.microsoft.com/en-us/help/971108”>971108 </a> MS09-062: Description of the security update for Microsoft .NET Framework 1.1 Service Pack 1: October 13, 2009<br /><br /></div></span><span><div><a href=“https://support.microsoft.com/en-us/help/971110”>971110 </a> MS09-062: Description of the security update for Microsoft .NET Framework 2.0 Service Pack 1: October 13, 2009<br /><br /></div></span><span><div><a href=“https://support.microsoft.com/en-us/help/971111”>971111 </a> MS09-062: Description of the security update for Microsoft .NET Framework 2.0 Service Pack 2: October 13, 2009<br /><br /></div></span><span><div><a href=“https://support.microsoft.com/en-us/help/971117”>971117 </a> MS09-062: Description of the security update for Microsoft Report Viewer 2005 Service Pack 1 Redistributable Package: October 13, 2009<br /><br /></div></span><span><div><a href=“https://support.microsoft.com/en-us/help/971118”>971118 </a> MS09-062: Description of the security update for Microsoft Report Viewer 2008 Redistributable Package: October 13, 2009<br /><br /></div></span><span><div><a href=“https://support.microsoft.com/en-us/help/971119”>971119 </a> MS09-062: Description of the security update for Microsoft Report Viewer 2008 Service Pack 1 Redistributable Package: October 13, 2009<br /><br /></div></span><span><div><a href=“https://support.microsoft.com/en-us/help/972221”>972221 </a> MS09-062: Description of the security update for Microsoft Visual Studio 2008: October 13, 2009<br /><br /></div></span><span><div><a href=“https://support.microsoft.com/en-us/help/972222”>972222 </a> MS09-062: Description of the security update for Microsoft Visual Studio 2008 Service Pack 1: October 13, 2009<br /><br /></div></span><span><div><a href=“https://support.microsoft.com/en-us/help/972580”>972580 </a> MS09-062: Description of the security update for Office 2003: October 13, 2009<br /><br /></div></span><span><div><a href=“https://support.microsoft.com/en-us/help/972581”>972581 </a> MS09-062: Description of the security update for the 2007 Office system: October 13, 2009<br /><br /></div></span><span><div><a href=“https://support.microsoft.com/en-us/help/974811”>974811 </a> <br />MS09-062: Description of the security update for Office XP: October 13, 2009<br /></div></span><span><div><a href=“https://support.microsoft.com/en-us/help/973636”>973636 </a> MS09-062: Description of the security update for Microsoft Works 8: October 13, 2009<br /><br /></div></span><span><div><a href=“https://support.microsoft.com/en-us/help/975337”>975337 </a> MS09-062: Description of the security update for GDI+ for Microsoft Platform SDK Redistributable: October 13, 2009<br /><br /></div></span><span><div><a href=“https://support.microsoft.com/en-us/help/975365”>975365 </a>MS09-062: Description of the security update for GDI+ for Microsoft Visio 2002: October 13, 2009<br /></div></span><span><div><a href=“https://support.microsoft.com/en-us/help/975962”>975962 </a> MS09-062: Description of the security update for Forefront Client Security on Windows 2000: October 13, 2009<br /><br /></div></span><br /><br /><span>Note</span> In addition to the products listed in the Applies To section, this update also applies to Microsoft Report Viewer Redistributable 2008 SP1.</div></body></html>