CVE Database · CVE-2004-0200
CVSS v3.1
N/A
EPSS
49.02%
Published
Sep 28, 2004
Modified
Apr 15, 2026
Public PoC / Exploit (7)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.
Affected Products (43)
References (20)
