GCVE - cpe:2.3:a:microsoft:report_viewer:2005:sp1:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:report_viewer:2005:sp1:*:*:*:*:*:*

part: a version: 2005 update: sp1

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Report Viewer (`212acd97-5f2d-540e-a672-f3d05bb9769c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-1976`	vulnerable	2026-06-08 04:58:03.376481	Details available Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability." Published: 2011-08-10T21:16:00.000Z Updated: 2024-08-06T22:46:00.863Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-067 http://marc.info/?l=bugtraq&m=145326307707460&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12773 http://www.securityfocus.com/bid/49033 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04945270	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3015`	vulnerable	2026-06-08 04:50:32.858217	Details available Integer overflow in gdiplus.dll in GDI+ in Microsoft Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a BMP image file with a malformed BitMapInfoHeader that triggers a buffer overflow, aka "GDI+ BMP Integer Overflow Vulnerability." Published: 2008-09-10T15:00:00.000Z Updated: 2024-08-07T09:21:34.937Z Open on db.gcve.eu Reference links http://secunia.com/advisories/32154 http://www.securitytracker.com/id?1020838 http://marc.info/?l=bugtraq&m=122235754013992&w=2 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052 http://www.securityfocus.com/archive/1/496153/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3014`	vulnerable	2026-06-08 04:50:32.853929	Details available Buffer overflow in gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a malformed WMF image file that triggers improper memory allocation, aka "GDI+ WMF Buffer Overrun Vulnerability." Published: 2008-09-10T15:00:00.000Z Updated: 2024-08-07T09:21:34.956Z Open on db.gcve.eu Reference links http://secunia.com/advisories/32154 http://marc.info/?l=bugtraq&m=122235754013992&w=2 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052 http://www.securityfocus.com/bid/31021 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6004	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3013`	vulnerable	2026-06-08 04:50:32.850659	Details available gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a malformed GIF image file containing many extension markers for graphic control extensions and subsequent unknown labels, aka "GDI+ GIF Parsing Vulnerability." Published: 2008-09-10T15:00:00.000Z Updated: 2024-08-07T09:21:34.961Z Open on db.gcve.eu Reference links http://secunia.com/advisories/32154 http://www.zerodayinitiative.com/advisories/ZDI-08-056 http://ifsec.blogspot.com/2008/09/windows-gdi-gif-memory-corruption.html http://marc.info/?l=bugtraq&m=122235754013992&w=2 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3012`	vulnerable	2026-06-08 04:50:32.841269	Details available gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 does not properly perform memory allocation, which allows remote attackers to execute arbitrary code via a malformed EMF image file, aka "GDI+ EMF Memory Corruption Vulnerability." Published: 2008-09-10T15:00:00.000Z Updated: 2024-08-07T09:21:34.935Z Open on db.gcve.eu Reference links http://secunia.com/advisories/32154 http://marc.info/?l=bugtraq&m=122235754013992&w=2 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6040 http://www.vupen.com/english/advisories/2008/2696	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-5348`	vulnerable	2026-06-08 04:50:04.926189	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.