| Definition Id: oval:org.mitre.oval:def:3320 |
Date: 2007-06-15 |
| Title: |
GDI+ JPEG Parsing Engine Buffer Overflow Microsoft Office Visio Pro 2003 |
| Description: |
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation. |
| Version: |
4 |
Class: |
vulnerability |
| Status: |
ACCEPTED |
Reference(s): |
CVE-2004-0200
|
| Family: |
windows |
| Platform(s): |
Microsoft Windows NT
Microsoft Windows 2000
Microsoft Windows XP |
Product(s): |
Microsoft Office Visio Professional 2003 |
| Definition Synopsis: |
|
|
