CVE-2004-0200

high · 9.3

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.

9.3

CVSS

49.0%

EPSS (exploit prob.)

99th

EPSS percentile

2004-09-28

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

Vendor	Product	Affected versions
microsoft	.net_framework	1.0
microsoft	digital_image_pro	7.0
microsoft	digital_image_pro	9
microsoft	digital_image_suite	9
microsoft	excel	2002
microsoft	excel	2003
microsoft	frontpage	2002
microsoft	frontpage	2003
microsoft	greetings	2002
microsoft	infopath	2003
microsoft	office	2003
microsoft	office	xp
microsoft	onenote	2003
microsoft	outlook	2002
microsoft	outlook	2003
microsoft	picture_it	7.0
microsoft	picture_it	9
microsoft	picture_it	2002
microsoft	powerpoint	2002
microsoft	powerpoint	2003
microsoft	producer	all versions
microsoft	project	2002
microsoft	project	2003
microsoft	publisher	2002
microsoft	publisher	2003
microsoft	visio	2002
microsoft	visio	2003
microsoft	visual_basic	2002
microsoft	visual_basic	2003
microsoft	visual_c#	2002
microsoft	visual_c#	2003
microsoft	visual_c++	2002
microsoft	visual_c++	2003
microsoft	visual_j#_.net	2003
microsoft	visual_studio_.net	2002
microsoft	visual_studio_.net	2003
microsoft	word	2002
microsoft	word	2003
microsoft	windows_2003_server	r2
microsoft	windows_xp	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2004-0200