CVE-2004-0200

Published 17 Sep 2004 · Updated 08 Aug 2024

Follow this CVE

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

35Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 49%

from disclosure to weapon5 days

Published on NVDSep 17

1st PoC+5d

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.

Affected products

n/a · n/a

public PoCs found — 6✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/556 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/475 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/472 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/480 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/474 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/478

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References