Check Point Advisories

Preemptive Protection against Microsoft GDI+ PNG Heap Overflow Vulnerability (MS09-062)

Vulnerability
Protection

Check Point Reference:	CPAI-2009-210
Date Published:	13 Oct 2009
Severity:	Critical
Last Updated:	Thursday 01 January, 2009
Source:	Microsoft Security Bulletin MS09-062
Industry Reference:	CVE-2009-2501
Protection Provided by:
Who is Vulnerable?	Microsoft Internet Explorer 6 SP1 when installed on Microsoft Windows 2000 SP4 Windows XP SP2 Windows XP SP3 Windows XP Professional x64 Edition SP2 Microsoft Office XP SP3 Microsoft Office 2003 SP3 2007 Microsoft Office System SP1 2007 Microsoft Office System SP2 Microsoft Office Project 2002 SP1 Microsoft Visio 2002 SP2 Microsoft Office Word Viewer Microsoft Word Viewer 2003 Microsoft Word Viewer 2003 SP3 Microsoft Office Excel Viewer 2003 Microsoft Office Excel Viewer 2003 SP3 Microsoft Office Excel Viewer Microsoft Office PowerPoint Viewer 2007 Microsoft Office PowerPoint Viewer 2007 SP1 Microsoft Office PowerPoint Viewer 2007 SP2 Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 Microsoft Expression Web and Microsoft Expression Web 2 Microsoft Office Groove 2007 Microsoft Office Groove 2007 SP1 Microsoft Works 8.5 SQL Server 2000 Reporting Services SP2 SQL Server 2005 SP2 SQL Server 2005 x64 Edition SP2 SQL Server 2005 (Itanium) SQL Server 2005 SP3 SQL Server 2005 x64 Edition SP3 SQL Server 2005 (Itanium) SP3 Microsoft Report Viewer 2005 SP1 Redistributable Package Microsoft Report Viewer 2008 Redistributable Package Microsoft Report Viewer 2008 Redistributable Package SP1 Microsoft Forefront Client Security 1.0 when installed on Microsoft Windows 2000 SP4
Vulnerability Description	A remote code execution vulnerability has been discovered in the way that GDI+ allocates memory. The Microsoft Windows graphics device interface (GDI) enables applications to use graphics and formatted text on the video display and on the printer. A remote attacker may trigger this issue via a specially crafted PNG image file. The Portable Network Graphics (PNG) specification is an image format used as an alternative to other image formats such as the GIF and TIFF formats. Successful exploitation would allow execution of arbitrary code on a vulnerable system.
Update/Patch Avaliable	Apply patches: Microsoft Security Bulletin MS09-062
Vulnerability Details	The vulnerability is due to malicious PNG files that can cause GDI+ to reallocate a heap buffer to a small size and then try to write to it again. A remote attacker could trigger this flaw by convincing a victim to open a specially crafted PNG file. Successful exploitation of this issue may allow the attacker to take complete control of the affected system.

Protection Overview

This website uses cookies for its functionality and for analytics and marketing purposes. By continuing to use this website, you agree to the use of cookies. For more information, please read our .