CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 9.3. It affects Microsoft, Office. Its EPSS score suggests a 22.6% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2009-2518
Severity
HIGH
CVSS
9.3
EPSS
22.61%
Microsoft Office
Original NVD Description
Integer overflow in GDI+ in Microsoft Office XP SP3 allows remote attackers to execute arbitrary code via an Office document with a bitmap (aka BMP) image that triggers memory corruption, aka "Office BMP Integer Overflow Vulnerability."