CVE-2004-0200

Microsoft .net Framework - Buffer Overflow

Title source: rule

Description

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.

Exploits (6)

exploitdb WORKING POC VERIFIED
by M4Z3R · cremotewindows
https://www.exploit-db.com/exploits/556
exploitdb WORKING POC VERIFIED
by John Bissell · cremotewindows
https://www.exploit-db.com/exploits/480
exploitdb WORKING POC VERIFIED
by ATmaCA · cremotewindows
https://www.exploit-db.com/exploits/478
exploitdb WORKING POC VERIFIED
by Elia Florio · bashremotewindows
https://www.exploit-db.com/exploits/475
exploitdb WORKING POC VERIFIED
by FoToZ · cremotewindows
https://www.exploit-db.com/exploits/472
exploitdb WORKING POC VERIFIED
by perplexy · bashdoswindows
https://www.exploit-db.com/exploits/474

References (16)

Scores

EPSS 0.7669
EPSS Percentile 99.0%

Details

Status published
Products (40)
microsoft/digital_image_pro 7.0
microsoft/digital_image_pro 9
microsoft/digital_image_suite 9
microsoft/excel 2002
microsoft/excel 2003
microsoft/frontpage 2002
microsoft/frontpage 2003
microsoft/greetings 2002
microsoft/infopath 2003
microsoft/.net_framework 1.0 sp2
... and 30 more
Published Sep 28, 2004
Tracked Since Feb 18, 2026