Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2004-0200
HistorySep 28, 2004 - 4:00 a.m.

CVE-2004-0200

2004-09-2804:00:00
[email protected]
web.nvd.nist.gov
1

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.957 High

EPSS

Percentile

99.4%

JSON

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.

Affected configurations

NVD
Node
microsoft.net_frameworkMatch1.0sp2sdk
OR
microsoftdigital_image_proMatch7.0
OR
microsoftdigital_image_proMatch9
OR
microsoftdigital_image_suiteMatch9
OR
microsoftexcelMatch2002
OR
microsoftexcelMatch2003
OR
microsoftfrontpageMatch2002
OR
microsoftfrontpageMatch2003
OR
microsoftgreetingsMatch2002
OR
microsoftinfopathMatch2003
OR
microsoftofficeMatch2003
OR
microsoftofficeMatchxpsp3
OR
microsoftonenoteMatch2003
OR
microsoftoutlookMatch2002
OR
microsoftoutlookMatch2003
OR
microsoftpicture_itMatch7.0
OR
microsoftpicture_itMatch9
OR
microsoftpicture_itMatch2002
OR
microsoftpowerpointMatch2002
OR
microsoftpowerpointMatch2003
OR
microsoftproducergoldoffice_powerpoints
OR
microsoftprojectMatch2002sp1
OR
microsoftprojectMatch2003
OR
microsoftpublisherMatch2002
OR
microsoftpublisherMatch2003
OR
microsoftvisioMatch2002sp2
OR
microsoftvisioMatch2003
OR
microsoftvisual_basicMatch2002.net_standard
OR
microsoftvisual_basicMatch2003.net_standard
OR
microsoftvisual_c\#Match2002.net_standard
OR
microsoftvisual_c\#Match2003.net_standard
OR
microsoftvisual_c\+\+Match2002.net_standard
OR
microsoftvisual_c\+\+Match2003.net_standard
OR
microsoftvisual_j\#_.netMatch2003.net_standard
OR
microsoftvisual_studio_.netMatch2002gold
OR
microsoftvisual_studio_.netMatch2003gold
OR
microsoftwordMatch2002
OR
microsoftwordMatch2003
Node
microsoftwindows_2003_serverMatchr2
OR
microsoftwindows_xp64-bit
OR
microsoftwindows_xpgold
OR
microsoftwindows_xpsp164-bit
OR
microsoftwindows_xpsp1tablet_pc

References

Related

nessus 3
cve 1
securityvulns 2
checkpoint_advisories 2
cvelist 1
cert 1
nessus
nessus
MS04-028: Buffer Overrun in JPEG Processing (833987)
2004-09-14 00:00:00
MS04-028 Exploitation Backdoor Account Detection
2004-09-24 00:00:00
Radmin (Remote Administrator) Port 10002 - Possible GDI Compromise
2004-09-28 00:00:00
cve
cve
CVE-2004-0200
2004-09-28 04:00:00
securityvulns
securityvulns
Microsoft Security Bulletin MS04-028 Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987)
2004-09-15 00:00:00
US-CERT Technical Cyber Security Alert TA04-260A -- Microsoft Windows JPEG component buffer overflow
2004-09-17 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows GDI JPEG Processing Buffer Overrun (MS04-028; CVE-2004-0200)
2005-03-27 00:00:00
Microsoft Windows GDI JPEG Processing Buffer Overrun (MS04-028) - Ver2 (CVE-2004-0200)
2014-03-03 00:00:00
cvelist
cvelist
CVE-2004-0200
2004-09-17 04:00:00
cert
cert
Microsoft Windows GDI+ contains a buffer overflow vulnerability in the JPEG parsing component
2004-09-14 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.957 High

EPSS

Percentile

99.4%

JSON
Related for NVD:CVE-2004-0200
nessus3cve1securityvulns2checkpoint_advisories2cvelist1cert1