CVE-2009-2528 vulnerability in Microsoft Products
Published on October 14, 2009
GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Memory Corruption Vulnerability."
Products Associated with CVE-2009-2528
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2009-2528 are published in these products:
Exploit Probability
EPSS
41.20%
Percentile
97.31%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.