Update Protection against Microsoft Windows GDI .NET API Remote Code Execution Vulnerability (MS09-062)
| Check Point Reference: | CPAI-2009-264 | |
| Date Published: | ||
| Severity: | ||
| Source: | Microsoft Security Bulletin MS09-062 | |
| Industry Reference(s): | CVE-2009-2504 | |
| Protection Provided by: |
Security Gateway
|
|
| Who is Vulnerable? Microsoft Internet Explorer 6 SP1 when installed on Microsoft Windows 2000 SP4 Windows XP SP2 Windows XP SP3 Windows XP Professional x64 Edition SP2 Windows Server 2003 SP2 Windows Server 2003 x64 Edition SP2 Windows Server 2003 (Itanium) SP2 Microsoft Office XP SP3 Microsoft Office 2003 SP3 2007 Microsoft Office System SP1 2007 Microsoft Office System SP2 Microsoft Office Project 2002 SP1 Microsoft Visio 2002 SP2 Microsoft Office Word Viewer Microsoft Word Viewer 2003 Microsoft Word Viewer 2003 SP3 Microsoft Office Excel Viewer 2003 Microsoft Office Excel Viewer 2003 SP3 Microsoft Office Excel Viewer Microsoft Office PowerPoint Viewer 2007 Microsoft Office PowerPoint Viewer 2007 SP1 Microsoft Office PowerPoint Viewer 2007 SP2 Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 Microsoft Expression Web and Microsoft Expression Web 2 Microsoft Office Groove 2007 Microsoft Office Groove 2007 SP1 Microsoft Works 8.5 SQL Server 2000 Reporting Services SP2 SQL Server 2005 SP2 SQL Server 2005 x64 Edition SP2 SQL Server 2005 (Itanium) SQL Server 2005 SP3 SQL Server 2005 x64 Edition SP3 SQL Server 2005 (Itanium) SP3 Microsoft Report Viewer 2005 SP1 Redistributable Package Microsoft Report Viewer 2008 Redistributable Package Microsoft Report Viewer 2008 Redistributable Package SP1 Microsoft Forefront Client Security 1.0 when installed on Microsoft Windows 2000 SP4 | ||
| Vulnerability Description A remote code execution vulnerability has been discovered in the Microsoft Windows GDI .NET API. The Microsoft Windows graphics device interface (GDI) enables applications to use graphics and formatted text on the video display and on the printer. A remote attacker may exploit this issue to take control of a vulnerable system. |
||
|
Update/Patch Available Apply patches: Microsoft Security Bulletin MS09-062 |
|
|
Vulnerability Details The vulnerability is a result of an integer overflow in certain GDI+ APIs that are accessible from .NET Framework applications. A remote attacker may trigger this issue by convincing a user to open a specially crafted Web page. Successful exploitation would allow execution of arbitrary code on a vulnerable system. |
Protection Overview
This protection will detect and block attempts to exploit this vulnerability.
In order for the protection to be activated, update your Security Gateway/VPN-1 product to the latest IPS/SmartDefense update. For information on how to update IPS/SmartDefense, go to SBP-2006-05, Protection tab and select the version of your choice.
To configure the defense, select your product from the list below and follow the related protection steps.