CVE-2004-0200 Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a...
HighCVSS 9.3
EPSS 49.0%
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft net framework | = 1.0-sp2 | No fix listed |
| Microsoft digital image pro | = 7.0 | No fix listed |
| Microsoft digital image pro | = 9 | No fix listed |
| Microsoft digital image suite | = 9 | No fix listed |
| Microsoft excel | = 2002 | No fix listed |
| Microsoft excel | = 2003 | No fix listed |
| Microsoft frontpage | = 2002 | No fix listed |
| Microsoft frontpage | = 2003 | No fix listed |
| Microsoft greetings | = 2002 | No fix listed |
| Microsoft infopath | = 2003 | No fix listed |
| Microsoft office | = 2003 | No fix listed |
| Microsoft office | = xp-sp3 | No fix listed |
| Microsoft onenote | = 2003 | No fix listed |
| Microsoft outlook | = 2002 | No fix listed |
| Microsoft outlook | = 2003 | No fix listed |
| Microsoft picture it | = 7.0 | No fix listed |
| Microsoft picture it | = 9 | No fix listed |
| Microsoft picture it | = 2002 | No fix listed |
| Microsoft powerpoint | = 2002 | No fix listed |
| Microsoft powerpoint | = 2003 | No fix listed |
| Microsoft producer | All versions | No fix listed |
| Microsoft project | = 2002-sp1 | No fix listed |
| Microsoft project | = 2003 | No fix listed |
| Microsoft publisher | = 2002 | No fix listed |
| Microsoft publisher | = 2003 | No fix listed |
Show 15 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft visio | = 2002-sp2 | No fix listed |
| Microsoft visio | = 2003 | No fix listed |
| Microsoft visual basic | = 2002 | No fix listed |
| Microsoft visual basic | = 2003 | No fix listed |
| Microsoft visual c | = 2002 | No fix listed |
| Microsoft visual c | = 2003 | No fix listed |
| Microsoft visual c++ | = 2002 | No fix listed |
| Microsoft visual c++ | = 2003 | No fix listed |
| Microsoft visual j .net | = 2003 | No fix listed |
| Microsoft visual studio .net | = 2002-gold | No fix listed |
| Microsoft visual studio .net | = 2003-gold | No fix listed |
| Microsoft word | = 2002 | No fix listed |
| Microsoft word | = 2003 | No fix listed |
| Microsoft windows 2003 server | = r2 | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 20040914 Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow mailing-list
- VU#297462 third-party-advisory us-government-resource
- TA04-260A third-party-advisory us-government-resource
- MS04-028 vendor-advisory
- win-jpeg-bo(16304) vdb-entry
- oval:org.mitre.oval:def:1105 signature vdb-entry
- oval:org.mitre.oval:def:1721 signature vdb-entry
- oval:org.mitre.oval:def:2706 signature vdb-entry
- oval:org.mitre.oval:def:3038 signature vdb-entry
- oval:org.mitre.oval:def:3082 signature vdb-entry
- oval:org.mitre.oval:def:3320 signature vdb-entry
- oval:org.mitre.oval:def:3810 signature vdb-entry
- oval:org.mitre.oval:def:3881 signature vdb-entry
- oval:org.mitre.oval:def:4003 signature vdb-entry
- oval:org.mitre.oval:def:4216 signature vdb-entry
- oval:org.mitre.oval:def:4307 signature vdb-entry