Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2004-0200
HistorySep 28, 2004 - 4:00 a.m.

CVE-2004-0200

2004-09-2804:00:00
NVD-CWE-Other
[email protected]
web.nvd.nist.gov
66
cve-2004-0200
gdi+
buffer overflow
jpeg parsing
remote code execution
vulnerability
nvd

7.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.957 High

EPSS

Percentile

99.4%

JSON

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.

References

Related

nessus 3
cert 1
securityvulns 2
checkpoint_advisories 2
cvelist 1
nessus
nessus
MS04-028: Buffer Overrun in JPEG Processing (833987)
2004-09-14 00:00:00
MS04-028 Exploitation Backdoor Account Detection
2004-09-24 00:00:00
Radmin (Remote Administrator) Port 10002 - Possible GDI Compromise
2004-09-28 00:00:00
cert
cert
Microsoft Windows GDI+ contains a buffer overflow vulnerability in the JPEG parsing component
2004-09-14 00:00:00
securityvulns
securityvulns
US-CERT Technical Cyber Security Alert TA04-260A -- Microsoft Windows JPEG component buffer overflow
2004-09-17 00:00:00
Microsoft Security Bulletin MS04-028 Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987)
2004-09-15 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows GDI JPEG Processing Buffer Overrun (MS04-028; CVE-2004-0200)
2005-03-27 00:00:00
Microsoft Windows GDI JPEG Processing Buffer Overrun (MS04-028) - Ver2 (CVE-2004-0200)
2014-03-03 00:00:00
cvelist
cvelist
CVE-2004-0200
2004-09-17 04:00:00

7.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.957 High

EPSS

Percentile

99.4%

JSON
Related for CVE-2004-0200
nessus3cert1securityvulns2checkpoint_advisories2cvelist1