GCVE - cpe:2.3:a:microsoft:expression_web:2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:expression_web:2:*:*:*:*:*:*:*

part: a version: 2 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Expression Web (`f3c95d59-8276-5631-9b16-c0125a12e9b1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-0007`	vulnerable	2026-06-08 05:03:01.658766	Details available Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML XSLT Vulnerability." Published: 2013-01-09T18:00:00.000Z Updated: 2024-08-06T14:10:56.771Z Open on db.gcve.eu Reference links http://www.us-cert.gov/cas/techalerts/TA13-008A.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15458 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-002	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0006`	vulnerable	2026-06-08 05:03:01.651737	Details available Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML Integer Truncation Vulnerability." Published: 2013-01-09T18:00:00.000Z Updated: 2025-01-16T20:51:20.538Z Open on db.gcve.eu Reference links http://www.us-cert.gov/cas/techalerts/TA13-008A.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-002 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16429 https://us-cert.cisa.gov/ics/advisories/icsa-20-315-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1889`	not_vulnerable	2026-06-08 05:00:51.245650	Details available Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Published: 2012-06-13T01:00:00.000Z Updated: 2025-10-22T00:05:47.142Z Open on db.gcve.eu Reference links http://www.us-cert.gov/cas/techalerts/TA12-192A.html http://technet.microsoft.com/security/advisory/2719615 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15195 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-043 http://www.us-cert.gov/cas/techalerts/TA12-174A.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3126`	vulnerable	2026-06-08 04:51:32.434173	Details available Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted PNG image file, aka "GDI+ PNG Integer Overflow Vulnerability." Published: 2009-10-14T10:00:00.000Z Updated: 2024-08-07T06:14:56.471Z Open on db.gcve.eu Reference links http://www.us-cert.gov/cas/techalerts/TA09-286A.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6134 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2528`	vulnerable	2026-06-08 04:51:29.057676	Details available GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Memory Corruption Vulnerability." Published: 2009-10-14T10:00:00.000Z Updated: 2024-08-07T05:52:15.196Z Open on db.gcve.eu Reference links http://www.us-cert.gov/cas/techalerts/TA09-286A.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6426 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2504`	vulnerable	2026-06-08 04:51:28.996070	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2503`	vulnerable	2026-06-08 04:51:28.994227	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2502`	vulnerable	2026-06-08 04:51:28.992607	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2501`	vulnerable	2026-06-08 04:51:28.990645	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2500`	vulnerable	2026-06-08 04:51:28.976739	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4033`	not_vulnerable	2026-06-08 04:50:37.558638	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.