CVE:CVE-2009-2528
CNNVD:CNNVD-200910-228
Microsoft Office XP SP3的GDI+没有使当地处理 Office Art属性表的畸形的对象，这会允许远程攻击者执行任意代码可以借助特制的Office文件，该文件会触发内存破坏，该漏洞又称"内存破坏漏洞"。
solution:Upgrade microsoft windows_2003_server to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than *; Upgrade microsoft windows_vista to a higher version than *,*:sp1,and avoid the version *:sp1; Upgrade microsoft windows_xp to a higher version than *:sp2,*:sp3,and avoid the version *:sp2,*:sp3; Upgrade microsoft .net_framework to a higher version than 1.1:sp1,2.0:sp1,2.0:sp2,and avoid the version 1.1:sp1,2.0:sp1,2.0:sp2; Upgrade microsoft internet_explorer to a higher version than 6:sp1,and avoid the version 6:sp1; Upgrade microsoft report_viewer to a higher version than 2005:sp1,2008,2008:sp1,and avoid the version 2005:sp1,2008,2008:sp1; Upgrade microsoft sql_server to a higher version than 2005:sp2,2005:sp3,and avoid the version 2005:sp2,2005:sp3; Upgrade microsoft sql_server_reporting_services to a higher version than 2000:sp2,and avoid the version 2000:sp2; Upgrade microsoft excel_viewer to a higher version than 2003,2003:sp3,and avoid the version 2003,2003:sp3; Upgrade microsoft expression_web to a higher version than *,2,and avoid the version 2; Upgrade microsoft office to a higher version than 2003:sp3,2007:sp1,2007:sp2,xp,and avoid the version 2003:sp3,2007:sp1,2007:sp2,xp; Upgrade microsoft office_compatibility_pack to a higher version than 2007:sp1,2007:sp2,and avoid the version 2007:sp1,2007:sp2; Upgrade microsoft office_excel_viewer to a higher version than *; Upgrade microsoft office_groove to a higher version than 2007,2007:sp1,and avoid the version 2007,2007:sp1; Upgrade microsoft office_powerpoint_viewer to a higher version than *,2007:sp1,2007:sp2,and avoid the version 2007:sp1,2007:sp2; Upgrade microsoft office_word_viewer to a higher version than *; Upgrade microsoft project to a higher version than 2002:sp1,and avoid the version 2002:sp1; Upgrade microsoft visio to a higher version than 2002:sp2,and avoid the version 2002:sp2; Upgrade microsoft word_viewer to a higher version than 2003,2003:sp3,and avoid the version 2003,2003:sp3; Upgrade microsoft works to a higher version than 8.5,and avoid the version 8.5; Upgrade microsoft platform_sdk to a higher version than *; Upgrade microsoft visual_studio to a higher version than 2008,2008:sp1,and avoid the version 2008,2008:sp1; Upgrade microsoft visual_studio_.net to a higher version than 2003:sp1,2005:sp1,and avoid the version 2003:sp1,2005:sp1; Upgrade microsoft forefront_client_security to a higher version than 1.0,and avoid the version 1.0; Upgrade microsoft visual_foxpro to a higher version than 8.0:sp1,9.0:sp2,and avoid the version 8.0:sp1,9.0:sp2