Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2004-0200 Details

Description

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://marc.info/?l=bugtraq&m=109524346729948&w=2	CVE
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-028	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/16304	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1105	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1721	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2706	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3038	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3082	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3320	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3810	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3881	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4003	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4216	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4307	CVE
http://www.kb.cert.org/vuls/id/297462	CVE	US Government Resource
http://www.us-cert.gov/cas/techalerts/TA04-260A.html	CVE	US Government Resource
http://marc.info/?l=bugtraq&m=109524346729948&w=2	[email protected]
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-028	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/16304	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1105	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1721	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2706	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3038	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3082	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3320	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3810	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3881	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4003	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4216	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4307	[email protected]
http://www.kb.cert.org/vuls/id/297462	[email protected]	US Government Resource
http://www.us-cert.gov/cas/techalerts/TA04-260A.html	[email protected]	US Government Resource

see all 32 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-Other	Weakness Not in a Standard CWE Category	[email protected]

Affected Products

Product	Versions
microsoft .net framework	1.0 sp2
CPE cpe:2.3:a:microsoft:.net_framework:1.0:sp2:sdk:::::* Remediation No remediation found in references.
microsoft digital image pro	7.0 9
CPE cpe:2.3:a:microsoft:digital_image_pro:7.0:::::::* cpe:2.3:a:microsoft:digital_image_pro:9:::::::* Remediation No remediation found in references.
microsoft digital image suite	9
CPE cpe:2.3:a:microsoft:digital_image_suite:9:::::::* Remediation No remediation found in references.
microsoft excel	2002 2003
CPE cpe:2.3:a:microsoft:excel:2002:::::::* cpe:2.3:a:microsoft:excel:2003:::::::* Remediation No remediation found in references.
microsoft frontpage	2002 2003
CPE cpe:2.3:a:microsoft:frontpage:2002:::::::* cpe:2.3:a:microsoft:frontpage:2003:::::::* Remediation No remediation found in references.
microsoft greetings	2002
CPE cpe:2.3:a:microsoft:greetings:2002:::::::* Remediation No remediation found in references.
microsoft infopath	2003
CPE cpe:2.3:a:microsoft:infopath:2003:::::::* Remediation No remediation found in references.
microsoft office	2003 xp sp3
CPE cpe:2.3:a:microsoft:office:2003:::::::* cpe:2.3:a:microsoft:office:xp:sp3:::::: Remediation No remediation found in references.
microsoft onenote	2003
CPE cpe:2.3:a:microsoft:onenote:2003:::::::* Remediation No remediation found in references.
microsoft outlook	2002 2003
CPE cpe:2.3:a:microsoft:outlook:2002:::::::* cpe:2.3:a:microsoft:outlook:2003:::::::* Remediation No remediation found in references.
microsoft picture it	7.0 9 2002
CPE cpe:2.3:a:microsoft:picture_it:7.0:::::::* cpe:2.3:a:microsoft:picture_it:9:::::::* cpe:2.3:a:microsoft:picture_it:2002:::::::* Remediation No remediation found in references.
microsoft powerpoint	2002 2003
CPE cpe:2.3:a:microsoft:powerpoint:2002:::::::* cpe:2.3:a:microsoft:powerpoint:2003:::::::* Remediation No remediation found in references.
microsoft producer	All versions
CPE cpe:2.3:a:microsoft:producer::gold:office_powerpoints::::: Remediation No remediation found in references.
microsoft project	2002 sp1 2003
CPE cpe:2.3:a:microsoft:project:2002:sp1:::::: cpe:2.3:a:microsoft:project:2003:::::::* Remediation No remediation found in references.
microsoft publisher	2002 2003
CPE cpe:2.3:a:microsoft:publisher:2002:::::::* cpe:2.3:a:microsoft:publisher:2003:::::::* Remediation No remediation found in references.
microsoft visio	2002 sp2 2003
CPE cpe:2.3:a:microsoft:visio:2002:sp2:::::: cpe:2.3:a:microsoft:visio:2003:::::::* Remediation No remediation found in references.
microsoft visual basic	2002 2003
CPE cpe:2.3:a:microsoft:visual_basic:2002::.net_standard::::: cpe:2.3:a:microsoft:visual_basic:2003::.net_standard::::: Remediation No remediation found in references.
microsoft visual c#	2002 2003
CPE cpe:2.3:a:microsoft:visual_c#:2002::.net_standard::::: cpe:2.3:a:microsoft:visual_c#:2003::.net_standard::::: Remediation No remediation found in references.
microsoft visual c++	2002 2003
CPE cpe:2.3:a:microsoft:visual_c++:2002::.net_standard::::: cpe:2.3:a:microsoft:visual_c++:2003::.net_standard::::: Remediation No remediation found in references.
microsoft visual j# .net	2003
CPE cpe:2.3:a:microsoft:visual_j#_.net:2003::.net_standard::::: Remediation No remediation found in references.
microsoft visual studio .net	2002 gold 2003 gold
CPE cpe:2.3:a:microsoft:visual_studio_.net:2002:gold:::::: cpe:2.3:a:microsoft:visual_studio_.net:2003:gold:::::: Remediation No remediation found in references.
microsoft word	2002 2003
CPE cpe:2.3:a:microsoft:word:2002:::::::* cpe:2.3:a:microsoft:word:2003:::::::* Remediation No remediation found in references.
microsoft windows 2003 server	r2
CPE cpe:2.3:o:microsoft:windows_2003_server:r2:::::::* Remediation No remediation found in references.
microsoft windows xp	All versions
CPE cpe:2.3:o:microsoft:windows_xp:::64-bit:::::* cpe:2.3:o:microsoft:windows_xp::gold::::::* cpe:2.3:o:microsoft:windows_xp::sp1:64-bit::::: cpe:2.3:o:microsoft:windows_xp::sp1:tablet_pc::::: Remediation No remediation found in references.

Change History

10 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 16, 2026		[email protected]
Nov 20, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Oct 30, 2018	CPE Deprecation Remap	[email protected]
Oct 12, 2018	CVE Modified	[email protected]
Oct 11, 2017	CVE Modified	[email protected]
Jul 11, 2017	CVE Modified	[email protected]
Oct 18, 2016	CVE Modified	[email protected]
Jan 1, 2004	Initial Analysis	[email protected]

CVE-2004-0200 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO