Microsoft Office Image Filters Buffer Overflow Vulnerabilities - Secunia Advisories - Vulnerability Intelligence

Home > Vulnerability Intelligence > Secunia Advisories > Microsoft Office Image Filters Buffer Overflow Vulnerabilities

Secunia Advisories

Advisories

Advisories by Product

Business Solutions Restricted

Partner Solutions Restricted

About

Microsoft Office Image Filters Buffer Overflow Vulnerabilities
Secunia Advisory:	SA21013	Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment
Release Date:	2006-07-11
Last Update:	2008-05-15
Popularity:	12,753 views

Critical:	Highly critical
Impact:	System access
Where:	From remote
Solution Status:	Vendor Patch

Software:	Microsoft Office 2000 Microsoft Office 2003 Professional Edition Microsoft Office 2003 Small Business Edition Microsoft Office 2003 Standard Edition Microsoft Office 2003 Student and Teacher Edition Microsoft Office Project 2002 Microsoft Office XP Microsoft OneNote 2003 Microsoft Project 2000 Microsoft Project 2003 Microsoft Works Suite 2004 Microsoft Works Suite 2005 Microsoft Works Suite 2006

Subscribe:	Instant alerts on relevant vulnerabilities

CVE reference:	CVE-2006-0007 CVE-2006-0033

Description: Two vulnerabilities have been reported in Microsoft Office, which can be exploited by malicious people to compromise a user's system. 1) A boundary error in the GIF image filter (GIFIMP32.FLT) can be exploited to cause a buffer overflow via a specially crafted GIF file. 2) A boundary error in the PNG image filter (PNG32.FLT) can be exploited to cause a buffer overflow via a specially crafted PNG file. Successful exploitation of the vulnerabilities allows execution of arbitrary code when a malicious image is opened in any application using the vulnerable image filters. Solution: Apply patches. Microsoft Office 2003 SP1 or SP2: http://www.microsoft.com/downloads/de...=66C15CD1-A33B-4EB4-9D90-87DECF053768 Microsoft Office XP SP3: http://www.microsoft.com/downloads/de...=1506FE89-1753-40AC-BB3E-A053B3EB6260 Microsoft Office 2000 SP3: http://www.microsoft.com/downloads/de...=9B0A1795-DA76-4935-AA90-E6AEDC0CDE6B Microsoft Project 2002: http://www.microsoft.com/downloads/de...=2194EC63-582E-4E64-B71F-99918BF14FFA Microsoft Project 2000: http://www.microsoft.com/downloads/de...=42493E0C-91DE-49B0-B5B7-2214D55DE079 Microsoft Works Suite 2004: http://www.microsoft.com/downloads/de...=1506FE89-1753-40AC-BB3E-A053B3EB6260 Microsoft Works Suite 2005: http://www.microsoft.com/downloads/de...=1506FE89-1753-40AC-BB3E-A053B3EB6260 Microsoft Works Suite 2006: http://www.microsoft.com/downloads/de...=1506FE89-1753-40AC-BB3E-A053B3EB6260 Provided and/or discovered by: 1) Yu Yang, NSFocus Security Team. 2) Dejun Meng, Fortinet Security Research Team. Changelog: 2006-07-12: Added links to US-CERT vulnerability notes. Added additional information from NSFocus and Fortinet. 2008-05-15: Updated Fortinet link. Original Advisory: MS06-039 (KB915384): http://www.microsoft.com/technet/security/Bulletin/MS06-039.mspx NSFocus: http://www.nsfocus.com/english/homepage/research/0604.htm Fortinet: http://www.fortiguardcenter.com/advisory/FGA-2006-22.html Other References: US-CERT VU#668564: http://www.kb.cert.org/vuls/id/668564 US-CERT VU#459388: http://www.kb.cert.org/vuls/id/459388

Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released. Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

9th Jan, 2009

New advisories:	14
New vulnerabilities:	38
Updated advisories:	21

Less // 263 views

Interstage HTTP Server mod_proxy_ftp Cross-Site Scripting

Moderately // 229 views

Pizzis CMS "idvar" SQL Injection Vulnerability

Less // 264 views

Openfire Multiple Vulnerabilities

Moderately // 289 views

OpenBSD update for OpenSSL

Less // 238 views

MODx "searchid" SQL Injection Vulnerability

Not // 348 views

Asterisk User Account Enumeration Weakness

Less // 363 views

Sun Solaris Samba "smbd" Information Disclosure Vulnerability

Less // 335 views

Serv-U Denial of Service Vulnerability

Less // 306 views

CuteNews Cross-Site Scripting and PHP Code Execution Vulnerabilities

Highly // 378 views

XOOPS "mydirname" PHP Code Injection Vulnerability

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.