CVE:CVE-2009-2518
CNNVD:CNNVD-200910-223
Microsoft Office XP SP3的GDI+中存在整数值溢出。远程攻击者可以借助具有一个bitmap (又称BMP)图像的Office文件，且该文件能触发内存破坏，执行任意代码。该漏洞又称"Office BMP 整数值溢出漏洞"
solution:Upgrade microsoft office to a higher version than xp:sp3,and avoid the version xp:sp3