kbrain

CVE-2009-2501

HIGH · CVSS 9.3EPSS 26.7%EU EUVD

Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted PNG image file, aka "GDI+ PNG Heap Overflow Vulnerability."

Key facts

CVSS score
9.3 (v2.0)
Severity
HIGH
CVSS vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness (CWE)
CWE-119
EPSS score
26.7% (98th percentile)
In CISA KEV
No
In EU EUVD
Yes (EUVD-2009-2496)
Published
October 14, 2009
NVD last modified
June 16, 2026
Status
Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2009-2496 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.

View on the EU Vulnerability Database

Affected products

  • microsoft / .net framework
  • microsoft / .net framework
  • microsoft / .net framework
  • microsoft / excel viewer
  • microsoft / excel viewer
  • microsoft / expression web
  • microsoft / expression web
  • microsoft / forefront client security
  • microsoft / internet explorer
  • microsoft / office
  • microsoft / office
  • microsoft / office
  • microsoft / office
  • microsoft / office compatibility pack
  • microsoft / office compatibility pack
  • microsoft / office excel viewer
  • microsoft / office groove
  • microsoft / office groove
  • microsoft / office powerpoint viewer
  • microsoft / office powerpoint viewer
  • microsoft / office powerpoint viewer
  • microsoft / office word viewer
  • microsoft / platform sdk
  • microsoft / project
  • microsoft / report viewer
  • microsoft / report viewer
  • microsoft / report viewer
  • microsoft / sql server
  • microsoft / sql server
  • microsoft / sql server
  • microsoft / sql server
  • microsoft / sql server
  • microsoft / sql server
  • microsoft / sql server reporting services
  • microsoft / visio
  • microsoft / visual foxpro
  • microsoft / visual foxpro
  • microsoft / visual studio
  • microsoft / visual studio
  • microsoft / visual studio .net
  • microsoft / visual studio .net
  • microsoft / windows 2000
  • microsoft / windows 2003 server
  • microsoft / windows 2003 server
  • microsoft / windows 2003 server
  • microsoft / windows server 2008
  • microsoft / windows server 2008
  • microsoft / windows server 2008
  • microsoft / windows vista
  • microsoft / windows vista

and 7 more…

Certified products that may be affected

11 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

See all 11 in the Security Certifications Explorer.

References

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain