Secunia

Some vulnerabilities have been reported in various Microsoft products, which can be exploited by malicious people to compromise a vulnerable system.

1) An integer overflow exists when processing the number of colours used in a bitmap image. This can be exploited to cause a heap-based buffer overflow via a specially crafted bitmap image.

2) An integer overflow error in the handling of WMF image files can be exploited to cause a heap-based buffer overflow.

3) A boundary error in the processing of PNG files can be exploited to cause a heap-based buffer overflow.

4) A boundary error exists within the processing of the "BitsPerSample" tag in TIFF files. This can be exploited to cause a buffer overflow via a specially crafted TIFF file.

5) An error within the processing of malformed graphic control extensions in TIFF files can be exploited to corrupt memory.

6) An integer overflow error in certain GDI+ APIs can be exploited to cause a buffer overflow via a specially crafted .NET Framework application.

7) An integer overflow vulnerability in the processing of PNG files can be exploited to cause a buffer overflow.

8) An error exists in the parsing of msofbtOPT Office Drawing record types containing certain property IDs, which can be exploited to corrupt memory when a user opens a specially crafted Office document.

Successful exploitation of these vulnerabilities allows execution of arbitrary code.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
1) Carsten Eiram, Secunia Research
4) Wushi of team509, reported via iDefense.
8) Marsu and an anonymous person, reported via iDefense.

The vendor credits:
2) Yamata Li of Palo Alto Networks
3) Thomas Garnier of SkyRecon
5) Ivan Fratric via Zero Day Initiative, Tavis Ormandy of Google Inc., and Carlo Di Dato (aka shinnai)
7) Tavis Ormandy of Google Inc.

Changelog
Further details available in Customer Area

Original Advisory
MS09-062 (KB957488, KB958869, KB971108, KB971110, KB971111, KB974811, KB972580, KB972581, KB975365, KB973636, KB970895, KB970892, KB970899, KB970896, KB970894, KB971022, KB971023, KB972221, KB972222, KB971117, KB971118, KB971119, KB971104, KB971105, KB975337, KB975962):
http://www.microsoft.com/technet/security/bulletin/MS09-062.mspx

Secunia Research:
http://secunia.com/secunia_research/2008-37/

iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=828
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=829

Zero Day Initiative:
http://www.zerodayinitiative.com/advisories/ZDI-09-072/

Deep Links
Links available in Customer Area