system
Describe <CVE-2009-2528>.
user
What is <CVE-2009-2528>?
assistant
GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Memory Corruption Vulnerability.".