QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2012-0167

Back to search

CVE-2012-0167

Published: May 9, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

Heap-based buffer overflow in the Office GDI+ library in Microsoft Office 2003 SP3 and 2007 SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted EMF image in an Office document, aka "GDI+ Heap Overflow Vulnerability."

VendorProductVersions

n/a

n/a

affected
n/a

References

49121
third-party-advisory
x_refsource_SECUNIA
53351
vdb-entry
x_refsource_BID
oval:org.mitre.oval:def:15628
vdb-entry
signature
x_refsource_OVAL
windows-gdi-emf-bo(75126)
vdb-entry
x_refsource_XF
MS12-034
vendor-advisory
x_refsource_MS
1027038
vdb-entry
x_refsource_SECTRACK
TA12-129A
third-party-advisory
x_refsource_CERT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now