CVE-2004-0200 : Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.

Published 2004-09-28 04:00:00

Updated 2018-10-30 16:25:27

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowExecute code

Products affected by CVE-2004-0200

Microsoft » Outlook » Version: 2002
cpe:2.3:a:microsoft:outlook:2002:*:*:*:*:*:*:*
Matching versions
Microsoft » Outlook » Version: 2003
cpe:2.3:a:microsoft:outlook:2003:*:*:*:*:*:*:*
Matching versions
Microsoft » Frontpage » Version: 2003
cpe:2.3:a:microsoft:frontpage:2003:*:*:*:*:*:*:*
Matching versions
Microsoft » Frontpage » Version: 2002
cpe:2.3:a:microsoft:frontpage:2002:*:*:*:*:*:*:*
Matching versions
Microsoft » Office » Version: XP Update SP3
cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*
Matching versions
Microsoft » Office » Version: 2003
cpe:2.3:a:microsoft:office:2003:*:*:*:*:*:*:*
Matching versions
Microsoft » Project » Version: 2002 Update SP1
cpe:2.3:a:microsoft:project:2002:sp1:*:*:*:*:*:*
Matching versions
Microsoft » Project » Version: 2003
cpe:2.3:a:microsoft:project:2003:*:*:*:*:*:*:*
Matching versions
Microsoft » Visual Basic » Version: 2003 .net Standard Edition
cpe:2.3:a:microsoft:visual_basic:2003:*:.net_standard:*:*:*:*:*
Matching versions
Microsoft » Visual Basic » Version: 2002 .net Standard Edition
cpe:2.3:a:microsoft:visual_basic:2002:*:.net_standard:*:*:*:*:*
Matching versions
Microsoft » Excel » Version: 2002
cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*
Matching versions
Microsoft » Excel » Version: 2003
cpe:2.3:a:microsoft:excel:2003:*:*:*:*:*:*:*
Matching versions
Microsoft » Word » Version: 2002
cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*
Matching versions
Microsoft » Word » Version: 2003
cpe:2.3:a:microsoft:word:2003:*:*:*:*:*:*:*
Matching versions
Microsoft » Powerpoint » Version: 2003
cpe:2.3:a:microsoft:powerpoint:2003:*:*:*:*:*:*:*
Matching versions
Microsoft » Powerpoint » Version: 2002
cpe:2.3:a:microsoft:powerpoint:2002:*:*:*:*:*:*:*
Matching versions
Microsoft » Greetings » Version: 2002
cpe:2.3:a:microsoft:greetings:2002:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows Xp » 64-bit Edition
cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*
Matching versions
Microsoft » Windows Xp » Update SP1 Tablet Pc Edition
cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*
Matching versions
Microsoft » Windows Xp » Update SP1 64-bit Edition
cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*
Matching versions
Microsoft » Windows Xp » Update Gold
cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*
Matching versions
Microsoft » .net Framework » Version: 1.0 Update SP2 SDK Edition
cpe:2.3:a:microsoft:.net_framework:1.0:sp2:sdk:*:*:*:*:*
Matching versions
Microsoft » Windows 2003 Server » Version: R2
cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*
Matching versions
Microsoft » Visio » Version: 2002 Update SP2
cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*
Matching versions
Microsoft » Visio » Version: 2003
cpe:2.3:a:microsoft:visio:2003:*:*:*:*:*:*:*
Matching versions
Microsoft » Visual Studio .net » Version: 2002 Update Gold
cpe:2.3:a:microsoft:visual_studio_.net:2002:gold:*:*:*:*:*:*
Matching versions
Microsoft » Visual Studio .net » Version: 2003 Update Gold
cpe:2.3:a:microsoft:visual_studio_.net:2003:gold:*:*:*:*:*:*
Matching versions
Microsoft » Publisher » Version: 2003
cpe:2.3:a:microsoft:publisher:2003:*:*:*:*:*:*:*
Matching versions
Microsoft » Publisher » Version: 2002
cpe:2.3:a:microsoft:publisher:2002:*:*:*:*:*:*:*
Matching versions
Microsoft » Digital Image Pro » Version: 7.0
cpe:2.3:a:microsoft:digital_image_pro:7.0:*:*:*:*:*:*:*
Matching versions
Microsoft » Digital Image Pro » Version: 9
cpe:2.3:a:microsoft:digital_image_pro:9:*:*:*:*:*:*:*
Matching versions
Microsoft » Digital Image Suite » Version: 9
cpe:2.3:a:microsoft:digital_image_suite:9:*:*:*:*:*:*:*
Matching versions
Microsoft » Infopath » Version: 2003
cpe:2.3:a:microsoft:infopath:2003:*:*:*:*:*:*:*
Matching versions
Microsoft » Onenote » Version: 2003
cpe:2.3:a:microsoft:onenote:2003:*:*:*:*:*:*:*
Matching versions
Microsoft » Picture It » Version: 2002
cpe:2.3:a:microsoft:picture_it:2002:*:*:*:*:*:*:*
Matching versions
Microsoft » Picture It » Version: 7.0
cpe:2.3:a:microsoft:picture_it:7.0:*:*:*:*:*:*:*
Matching versions
Microsoft » Picture It » Version: 9
cpe:2.3:a:microsoft:picture_it:9:*:*:*:*:*:*:*
Matching versions
Microsoft » Producer » Update Gold Office Powerpoints Edition
cpe:2.3:a:microsoft:producer:*:gold:office_powerpoints:*:*:*:*:*
Matching versions
Microsoft » Visual C# » Version: 2003 .net Standard Edition
cpe:2.3:a:microsoft:visual_c\#:2003:*:.net_standard:*:*:*:*:*
Matching versions
Microsoft » Visual C# » Version: 2002 .net Standard Edition
cpe:2.3:a:microsoft:visual_c\#:2002:*:.net_standard:*:*:*:*:*
Matching versions
Microsoft » Visual C++ » Version: 2003 .net Standard Edition
cpe:2.3:a:microsoft:visual_c\+\+:2003:*:.net_standard:*:*:*:*:*
Matching versions
Microsoft » Visual C++ » Version: 2002 .net Standard Edition
cpe:2.3:a:microsoft:visual_c\+\+:2002:*:.net_standard:*:*:*:*:*
Matching versions
Microsoft » Visual J# .net » Version: 2003 .net Standard Edition
cpe:2.3:a:microsoft:visual_j\#_.net:2003:*:.net_standard:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2004-0200

EPSS FAQ

95.70%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 99 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2004-0200

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

References for CVE-2004-0200

Jump to

Vulnerability Details : CVE-2004-0200

Products affected by CVE-2004-0200

Exploit prediction scoring system (EPSS) score for CVE-2004-0200

CVSS scores for CVE-2004-0200

References for CVE-2004-0200