VDB
CVE-2004-0209
CVE-2004-0209
PUBLISHED
CVSS 10 CRITICAL
Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats that involve "an unchecked buffer."
EPSS 69.62% · 98.7th percentile
Risk Scores
CVSS 2.0
10
EPSS Score
69.62%
98.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| microsoft | windows_xp | |
| n/a | n/a | * |
| microsoft | windows_2003_server | * |
| microsoft | windows_2000 |
Timeline
- CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Sep 8, 2023 EPSS Score
- Sep 23, 2023 EPSS Score
References
- 11375 vdb
- win-emf-bo(16581) vdb
- VU#806278 third-party-advisory
- 20041019 [EXPL] (MS04-032) Microsoft Windows XP Metafile (.emf) Heap Overflow mailing-list
- win-ms04032-patch(17658) vdb
- oval:org.mitre.oval:def:1872 vdb
- oval:org.mitre.oval:def:2428 vdb
- oval:org.mitre.oval:def:2114 vdb
- MS04-032 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2004-0209 advisory