CVE-2004-0200

EPSS 49.0%

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.

Affected products

n/a · n/a

public PoCs found — 6

exploitdbwww.exploit-db.com/exploits/474unverified exploitdbwww.exploit-db.com/exploits/556unverified exploitdbwww.exploit-db.com/exploits/475unverified exploitdbwww.exploit-db.com/exploits/478unverified exploitdbwww.exploit-db.com/exploits/472unverified exploitdbwww.exploit-db.com/exploits/480unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References