$ cve CVE-2004-0200 JSON

CVE-2004-0200 EXPLOIT

9.3

HIGH · CVSS 2.0 · EPSS 49% (pctl 99)

Patch early

A public exploit exists.

Description

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.

Scoring

CVSS	9.3 (HIGH, v2.0)
Vector	AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS	49.02% — more likely to be exploited than 99% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2004-09-28
Last modified	2026-06-16

Affected (24)

Vendor	Product
microsoft	.net framework
microsoft	digital image pro
microsoft	digital image suite
microsoft	excel
microsoft	frontpage
microsoft	greetings
microsoft	infopath
microsoft	office
microsoft	onenote
microsoft	outlook
microsoft	picture it
microsoft	powerpoint
microsoft	producer
microsoft	project
microsoft	publisher
microsoft	visio
microsoft	visual basic
microsoft	visual c\#
microsoft	visual c\+\+
microsoft	visual j\# .net
microsoft	visual studio .net
microsoft	windows 2003 server
microsoft	windows xp
microsoft	word

Public exploits

Source	Title	Date
exploit-db	Microsoft Windows - JPEG GDI+ Bind/Reverse/Admin/File Download	2004-09-27
exploit-db	Microsoft Windows - JPEG GDI+ Overflow Download Shellcode (MS04-028)	2004-09-25
exploit-db	Microsoft Windows - JPEG GDI+ Remote Heap Overflow (MS04-028)	2004-09-25
exploit-db	Microsoft Windows - JPEG GDI+ Overflow Administrator (MS04-028)	2004-09-23
exploit-db	Microsoft Windows - JPEG GDI+ Overflow Shellcode	2004-09-22
exploit-db	Microsoft Windows - JPEG Processing Buffer Overrun (MS04-028)	2004-09-22

References

→ the Explorer · watch your stack · NVD