← Back

CVE-2010-0028

nvd nist
Published: Feb 10, 2010Modified: Apr 29, 2026

JSON object

Loading...
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD

Description

Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted JPEG (.JPG) file, aka "MS Paint Integer Overflow Vulnerability."

Affected (5)

Microsoft
3 products
Windows 2000
Windows Server 2003
Windows Xp
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Windows 2000
All versions
Windows Server 2003
All versions
Microsoft
Windows Xp
All versions
Windows Xp
All versions
Windows Xp
All versions

Related CWEs

CWE-189
CWE-189

References (8)

Source: secure@microsoft.com
Source: secure@microsoft.com
US Government Resource
Source: secure@microsoft.com
Source: secure@microsoft.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.