Revision Date: | 2006-01-12 | Version: | 4 |
Title: | GDI+ JPEG Parsing Engine Buffer Overflow (Visio Pro 2002) |
Description: | Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation. |
Family: | windows | Class: | vulnerability |
Status: | ACCEPTED | Reference(s): | CVE-2004-0200
|
Platform(s): | Microsoft Windows 2000 Microsoft Windows NT Microsoft Windows XP
| Product(s): | Microsoft Office Visio Professional 2002
|
Definition Synopsis |
Microsoft Office Visio Professional 2002 with service pack 2 AND the version of mso.dll is less than 10.0.6714.0
|