Vulnerability in Microsoft Digital_image_pro
CVE-2004-0200
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is no…
EPSS: 0.490 (98.8th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Digital_image_pro — versions 7.0, 9
- Microsoft Digital_image_suite — versions 9
- Microsoft Excel — versions 2002, 2003
- Microsoft Frontpage — versions 2002, 2003
- Microsoft Greetings — versions 2002
- Microsoft Infopath — versions 2003
- Microsoft .Net_framework — versions 1.0
- Microsoft Office — versions 2003, xp
- Microsoft Onenote — versions 2003
- Microsoft Outlook — versions 2002, 2003
References
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (US Government Resource, x_refsource_CERT, third-party-advisory)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (x_refsource_MS, vendor-advisory)