Description: Two vulnerabilities have been reported in Microsoft Office, which can be exploited by malicious people to compromise a user's system.
1) A boundary error in the GIF image filter (GIFIMP32.FLT) can be exploited to cause a buffer overflow via a specially crafted GIF file.
2) A boundary error in the PNG image filter (PNG32.FLT) can be exploited to cause a buffer overflow via a specially crafted PNG file.
Successful exploitation of the vulnerabilities allows execution of arbitrary code when a malicious image is opened in any application using the vulnerable image filters.
Do you have this product installed on your home computer? Scan using the free Personal Software Inspector. Check if a vulnerable version is installed on computers in your corporate network, scan using the Network Software Inspector.
Provided and/or discovered by: 1) Yu Yang, NSFocus Security Team.
2) Dejun Meng, Fortinet Security Research Team.
Changelog: 2006-07-12: Added links to US-CERT vulnerability notes. Added additional information from NSFocus and Fortinet.
2008-05-15: Updated Fortinet link.
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
