VDB

CVE-2004-0200

CVE-2004-0200 PUBLISHED CVSS 9.300000190734863 CRITICAL

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.

EPSS 74.51% · 98.9th percentile

Risk Scores

CVSS 2.0
9.300000190734863
EPSS Score
74.51%
98.9th percentile

Affected Products

VendorProductVersions
microsoftoutlook2002, 2003
microsoftdigital_image_suite9
microsoftwindows_xp
microsoftvisual_j\#_.net2003
microsoftpublisher2002, 2003
microsoft.net_framework1.0
microsoftvisual_studio_.net2003, 2002
microsoftvisual_c\+\+2002, 2003
microsoftword2003, 2002
microsoftfrontpage2002, 2003
microsoftvisio2002, 2003
microsoftvisual_basic2003, 2002
microsoftinfopath2003
microsoftgreetings2002
microsoftdigital_image_pro9, 7.0
microsoftwindows_2003_serverr2
microsoftonenote2003
microsoftvisual_c\#2002, 2003
microsoftproject2003, 2002
microsoftpowerpoint2002, 2003

…and 5 more

Timeline

  • CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 20, 2022 EPSS Score
  • Sep 4, 2022 EPSS Score
  • Oct 26, 2022 EPSS Score
  • Dec 18, 2022 EPSS Score
  • Feb 9, 2023 EPSS Score
  • Apr 3, 2023 EPSS Score
  • May 25, 2023 EPSS Score
  • Jul 17, 2023 EPSS Score
  • Aug 25, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›