CVE-2004-0200
Microsoft Windows - JPEG GDI+ Bind/Reverse/Admin/File Download
Severity Score
7.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
12
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.
Desbordamiento de búfer en el motor de proceso de JPEG (JPG) en GDIPlus.dll, usado en varios productos de Microsoft, permite a atacantes remotos ejecutar código de su elección mediante un campo de longitud JPEG COM pequeño que es normalizado a una longitud de entero grande antes de una operación de copia de memoria.
Microsoft's Graphic Device Interface Plus (GDI+) contains a vulnerability in the processing of JPEG images. This vulnerability may allow attackers to remotely execute arbitrary code on the affected system. Exploitation may occur as the result of viewing a malicious web site, reading an HTML-rendered email message, or opening a crafted JPEG image in any vulnerable application. The privileges gained by a remote attacker depend on the software component being attacked.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2004-03-11 CVE Reserved
- 2004-09-15 CVE Published
- 2004-09-17 First Exploit
- 2024-08-08 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
CAPEC
References (28)
| URL | Date | SRC |
|---|---|---|
| https://packetstorm.news/files/id/34466 | 2004-09-29 | |
| https://packetstorm.news/files/id/34467 | 2004-09-29 | |
| https://packetstorm.news/files/id/34468 | 2004-09-29 | |
| https://packetstorm.news/files/id/34389 | 2004-09-17 | |
| https://packetstorm.news/files/id/34465 | 2004-09-29 | |
| https://packetstorm.news/files/id/34525 | 2004-10-07 | |
| https://www.exploit-db.com/exploits/556 | 2018-12-12 | |
| https://www.exploit-db.com/exploits/478 | 2004-09-25 | |
| https://www.exploit-db.com/exploits/480 | 2004-09-25 | |
| https://www.exploit-db.com/exploits/475 | 2004-09-23 | |
| https://www.exploit-db.com/exploits/474 | 2004-09-22 | |
| https://www.exploit-db.com/exploits/472 | 2004-09-22 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-028 | 2018-10-30 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Microsoft Search vendor "Microsoft" | .net Framework Search vendor "Microsoft" for product ".net Framework" | 1.0 Search vendor "Microsoft" for product ".net Framework" and version "1.0" | sp2, sdk |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Digital Image Pro Search vendor "Microsoft" for product "Digital Image Pro" | 7.0 Search vendor "Microsoft" for product "Digital Image Pro" and version "7.0" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Digital Image Pro Search vendor "Microsoft" for product "Digital Image Pro" | 9 Search vendor "Microsoft" for product "Digital Image Pro" and version "9" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Digital Image Suite Search vendor "Microsoft" for product "Digital Image Suite" | 9 Search vendor "Microsoft" for product "Digital Image Suite" and version "9" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Excel Search vendor "Microsoft" for product "Excel" | 2002 Search vendor "Microsoft" for product "Excel" and version "2002" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Excel Search vendor "Microsoft" for product "Excel" | 2003 Search vendor "Microsoft" for product "Excel" and version "2003" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Frontpage Search vendor "Microsoft" for product "Frontpage" | 2002 Search vendor "Microsoft" for product "Frontpage" and version "2002" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Frontpage Search vendor "Microsoft" for product "Frontpage" | 2003 Search vendor "Microsoft" for product "Frontpage" and version "2003" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Greetings Search vendor "Microsoft" for product "Greetings" | 2002 Search vendor "Microsoft" for product "Greetings" and version "2002" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Infopath Search vendor "Microsoft" for product "Infopath" | 2003 Search vendor "Microsoft" for product "Infopath" and version "2003" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | 2003 Search vendor "Microsoft" for product "Office" and version "2003" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | xp Search vendor "Microsoft" for product "Office" and version "xp" | sp3 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Onenote Search vendor "Microsoft" for product "Onenote" | 2003 Search vendor "Microsoft" for product "Onenote" and version "2003" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Outlook Search vendor "Microsoft" for product "Outlook" | 2002 Search vendor "Microsoft" for product "Outlook" and version "2002" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Outlook Search vendor "Microsoft" for product "Outlook" | 2003 Search vendor "Microsoft" for product "Outlook" and version "2003" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Picture It Search vendor "Microsoft" for product "Picture It" | 7.0 Search vendor "Microsoft" for product "Picture It" and version "7.0" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Picture It Search vendor "Microsoft" for product "Picture It" | 9 Search vendor "Microsoft" for product "Picture It" and version "9" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Picture It Search vendor "Microsoft" for product "Picture It" | 2002 Search vendor "Microsoft" for product "Picture It" and version "2002" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Powerpoint Search vendor "Microsoft" for product "Powerpoint" | 2002 Search vendor "Microsoft" for product "Powerpoint" and version "2002" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Powerpoint Search vendor "Microsoft" for product "Powerpoint" | 2003 Search vendor "Microsoft" for product "Powerpoint" and version "2003" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Producer Search vendor "Microsoft" for product "Producer" | * | gold, office_powerpoints |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Project Search vendor "Microsoft" for product "Project" | 2002 Search vendor "Microsoft" for product "Project" and version "2002" | sp1 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Project Search vendor "Microsoft" for product "Project" | 2003 Search vendor "Microsoft" for product "Project" and version "2003" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Publisher Search vendor "Microsoft" for product "Publisher" | 2002 Search vendor "Microsoft" for product "Publisher" and version "2002" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Publisher Search vendor "Microsoft" for product "Publisher" | 2003 Search vendor "Microsoft" for product "Publisher" and version "2003" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Visio Search vendor "Microsoft" for product "Visio" | 2002 Search vendor "Microsoft" for product "Visio" and version "2002" | sp2 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Visio Search vendor "Microsoft" for product "Visio" | 2003 Search vendor "Microsoft" for product "Visio" and version "2003" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Visual Basic Search vendor "Microsoft" for product "Visual Basic" | 2002 Search vendor "Microsoft" for product "Visual Basic" and version "2002" | .net_standard |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Visual Basic Search vendor "Microsoft" for product "Visual Basic" | 2003 Search vendor "Microsoft" for product "Visual Basic" and version "2003" | .net_standard |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Visual C\# Search vendor "Microsoft" for product "Visual C\#" | 2002 Search vendor "Microsoft" for product "Visual C\#" and version "2002" | .net_standard |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Visual C\# Search vendor "Microsoft" for product "Visual C\#" | 2003 Search vendor "Microsoft" for product "Visual C\#" and version "2003" | .net_standard |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Visual C\+\+ Search vendor "Microsoft" for product "Visual C\+\+" | 2002 Search vendor "Microsoft" for product "Visual C\+\+" and version "2002" | .net_standard |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Visual C\+\+ Search vendor "Microsoft" for product "Visual C\+\+" | 2003 Search vendor "Microsoft" for product "Visual C\+\+" and version "2003" | .net_standard |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Visual J\# .net Search vendor "Microsoft" for product "Visual J\# .net" | 2003 Search vendor "Microsoft" for product "Visual J\# .net" and version "2003" | .net_standard |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Visual Studio .net Search vendor "Microsoft" for product "Visual Studio .net" | 2002 Search vendor "Microsoft" for product "Visual Studio .net" and version "2002" | gold |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Visual Studio .net Search vendor "Microsoft" for product "Visual Studio .net" | 2003 Search vendor "Microsoft" for product "Visual Studio .net" and version "2003" | gold |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Word Search vendor "Microsoft" for product "Word" | 2002 Search vendor "Microsoft" for product "Word" and version "2002" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Word Search vendor "Microsoft" for product "Word" | 2003 Search vendor "Microsoft" for product "Word" and version "2003" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows 2003 Server Search vendor "Microsoft" for product "Windows 2003 Server" | r2 Search vendor "Microsoft" for product "Windows 2003 Server" and version "r2" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | 64-bit |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | gold |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | sp1, 64-bit |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | sp1, tablet_pc |
Affected
| ||||||