CVE-2004-0209 Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via (1) Windows Metafi...
HighCVSS 10.0
EPSS 57.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats that involve "an unchecked buffer."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | = r2 | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 20041019 [EXPL] (MS04-032) Microsoft Windows XP Metafile (.emf) Heap Overflow mailing-list
- VU#806278 third-party-advisory us-government-resource
- 11375 vdb-entry
- MS04-032 vendor-advisory
- win-emf-bo(16581) vdb-entry
- win-ms04032-patch(17658) vdb-entry
- oval:org.mitre.oval:def:1872 signature vdb-entry
- oval:org.mitre.oval:def:2114 signature vdb-entry
- oval:org.mitre.oval:def:2428 signature vdb-entry