CVE-2004-0200

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.

• microsoft .net framework 1.0 • microsoft digital image pro 7.0 • microsoft digital image pro 9 • microsoft digital image suite 9 • microsoft excel 2002 • microsoft excel 2003 • microsoft frontpage 2002 • microsoft frontpage 2003 • microsoft greetings 2002 • microsoft infopath 2003 • microsoft office 2003 • microsoft office xp • microsoft onenote 2003 • microsoft outlook 2002 • microsoft outlook 2003 • microsoft picture it 7.0 • microsoft picture it 9 • microsoft picture it 2002 • microsoft powerpoint 2002 • microsoft powerpoint 2003 • microsoft producer • microsoft project 2002 • microsoft project 2003 • microsoft publisher 2002 • microsoft publisher 2003 • microsoft visio 2002 • microsoft visio 2003 • microsoft visual basic 2002 • microsoft visual basic 2003 • microsoft visual c\# 2002 • microsoft visual c\# 2003 • microsoft visual c\+\+ 2002 • microsoft visual c\+\+ 2003 • microsoft visual j\# .net 2003 • microsoft visual studio .net 2002 • microsoft visual studio .net 2003 • microsoft word 2002 • microsoft word 2003 • microsoft windows 2003 server r2 • microsoft windows xp