← Back

CVE-2004-0200

nvd nist
Published: Sep 28, 2004Modified: Apr 16, 2026

JSON object

Loading...
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD

Description

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.

Affected (43)

Microsoft
23 products
.net Framework
Digital Image Pro
Digital Image Suite
Excel
Frontpage
Greetings
Infopath
Office
Onenote
Outlook
Picture It
Powerpoint
Producer
Project
Publisher
Visio
Visual Basic
Visual C++
Visual J# .net
Visual Studio .net
Word
Windows 2003 Server
Windows Xp
Configuration A
38 vulnerable
Vulnerable SoftwareAffected Versions
.net Framework
Version 1.0 sp2
Microsoft
Digital Image Pro
Version 7.0
Digital Image Pro
Version 9
Digital Image Suite
Version 9
Microsoft
Excel
Version 2002
Excel
Version 2003
Microsoft
Frontpage
Version 2002
Frontpage
Version 2003
Greetings
Version 2002
Infopath
Version 2003
Microsoft
Office
Version 2003
Office
Version xp sp3
Onenote
Version 2003
Microsoft
Outlook
Version 2002
Outlook
Version 2003
Microsoft
Picture It
Version 2002
Picture It
Version 7.0
Picture It
Version 9
Microsoft
Powerpoint
Version 2002
Powerpoint
Version 2003
Producer
All versions
Microsoft
Project
Version 2002 sp1
Project
Version 2003
Microsoft
Publisher
Version 2002
Publisher
Version 2003
Microsoft
Visio
Version 2002 sp2
Visio
Version 2003
Microsoft
Visual Basic
Version 2002
Visual Basic
Version 2003
Microsoft
Visual C#
Version 2002
Visual C#
Version 2003
Microsoft
Visual C++
Version 2002
Visual C++
Version 2003
Visual J# .net
Version 2003
Microsoft
Visual Studio .net
Version 2002 gold
Visual Studio .net
Version 2003 gold
Microsoft
Word
Version 2002
Word
Version 2003
Configuration B
5 vulnerable
Vulnerable SoftwareAffected Versions
Windows 2003 Server
Version r2
Microsoft
Windows Xp
All versions
Windows Xp
All versions
Windows Xp
All versions
Windows Xp
All versions

References (32)

Source: cve@mitre.org
Source: cve@mitre.org
US Government Resource
Source: cve@mitre.org
US Government Resource
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.