Unless you are using Office or Lync which have their own copy of GDI+. Office 2010 only uses their own copy when running under XP though unlike older versions and 2013 don't support XP at all so they don't have their own copy anymore.

the security alert i got this morning says otherwise:

The following Microsoft products are vulnerable:

Windows operating system: Windows Vista SP 2, Windows Vista x64 Edition SP 2, Windows Server 2008 for 32-bit Systems SP 2, Windows Server 2008 for x64-based Systems SP 2, Windows Server 2008 for Itanium-based Systems SP 2, Windows Server 2008 for 32-bit Systems SP 2 (Server Core installation), Windows Server 2008 for x64-based Systems SP 2 (Server Core installation)

Microsoft Office suites and software: Microsoft Office 2003 SP 3, Microsoft Office 2007 SP 3, Microsoft Office 2010 SP 1 (32-bit editions), Microsoft Office 2010 SP 2 (32-bit editions), Microsoft Office 2010 SP 1 (64-bit editions), Microsoft Office 2010 SP 2 (64-bit editions), Microsoft Office Compatibility Pack SP 3

Microsoft communication platforms and software: Microsoft Lync 2010 (32-bit), Microsoft Lync 2010 (64-bit), Microsoft Lync 2010 Attendee, Microsoft Lync 2013 (32-bit), Microsoft Lync Basic 2013 (32-bit), Microsoft Lync 2013 (64-bit), Microsoft Lync Basic 2013 (64-bit)