NVD

Id
70653  
Name
CVE-2004-0200  
Description
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-09-28  
Modified Date
2017-07-10  
Seq
2004-0200  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
364440 70653 CVE-2004-0200 20040914 Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow  View
364441 70653 CVE-2004-0200 oval:org.mitre.oval:def:1105  View
364442 70653 CVE-2004-0200 oval:org.mitre.oval:def:1721  View
364443 70653 CVE-2004-0200 oval:org.mitre.oval:def:2706  View
364444 70653 CVE-2004-0200 oval:org.mitre.oval:def:3038  View
364445 70653 CVE-2004-0200 oval:org.mitre.oval:def:3082  View
364446 70653 CVE-2004-0200 oval:org.mitre.oval:def:3320  View
364447 70653 CVE-2004-0200 oval:org.mitre.oval:def:3810  View
364448 70653 CVE-2004-0200 oval:org.mitre.oval:def:3881  View
364449 70653 CVE-2004-0200 oval:org.mitre.oval:def:4003  View
364450 70653 CVE-2004-0200 oval:org.mitre.oval:def:4216  View
364451 70653 CVE-2004-0200 oval:org.mitre.oval:def:4307  View
364452 70653 CVE-2004-0200 VU#297462  View
364453 70653 CVE-2004-0200 MS04-028  View
364454 70653 CVE-2004-0200 TA04-260A  View
364455 70653 CVE-2004-0200 win-jpeg-bo(16304)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63038 JVNDB-2004-000380 Microsoft GDI+ の不正な JPEG ファイルの処理によるバッファオーバーフローの脆弱性 Microsoft の各種製品に実装されている GDI+ (GDI: Graphics Device Interface の拡張バージョン ) には、JPEG イメージファイルの処理に対するチェックが不適切であるため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2004-0200 8627 CVE-2004-0200 70653 9.3 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000380.html 2004-09-14 2007-04-01 View