CVE-2010-0028
EXPLOITEDMicrosoft Paint - Remote Code Execution via Crafted JPEG File
Title source: llmExploitation Summary
CVE-2010-0028 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including unsign.
AI-analyzed exploit summary This exploit targets an integer overflow vulnerability in Microsoft Paint (MS10-005) by crafting a malicious JPEG file with an abnormally large image size (37838x37838). The PoC generates a file that triggers a crash in MS Paint on Windows XP SP2/SP3.
Description
Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted JPEG (.JPG) file, aka "MS Paint Integer Overflow Vulnerability."
Exploits (1)
This exploit targets an integer overflow vulnerability in Microsoft Paint (MS10-005) by crafting a malicious JPEG file with an abnormally large image size (37838x37838). The PoC generates a file that triggers a crash in MS Paint on Windows XP SP2/SP3.