This application requires Javascript for optimal performance.

Bitmap.Header.BiClrUsed.Integer.Overflow

Release Date

Oct 16, 2009

Severity

high

Impact

System Compromise.

Description

This indicates an attempt to exploit an integer overflow vulnerability in Microsoft Office.

The vulnerability is caused by an error that occurs when the vulnerable software handles a specially crafted .BMP file. It allows a remote attacker to execute arbitrary code.

Affected Products

Microsoft Office XP Service Pack 3

Recommended Actions

Apply patch:

http://www.microsoft.com/technet/security/Bulletin/MS09-062.mspx

Coverage

IPS
VCM

Common Vulnerabilities and Exposures (CVE)

CVE-2009-2518

Reference/s

http://technet.microsoft.com/en-us/security/bulletin/MS09-062.mspx (MS-ID)

Reference: VID-17813