Oval Definition:oval:org.mitre.oval:def:3082
Revision Date:2006-01-12Version:4
Title:GDI+ JPEG Parsing Engine Buffer Overflow (Visio Pro 2002)
Description:Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2004-0200
Platform(s):Microsoft Windows 2000
Microsoft Windows NT
Microsoft Windows XP
Product(s):Microsoft Office Visio Professional 2002
Definition Synopsis
  • Microsoft Office Visio Professional 2002 with service pack 2
  • AND the version of mso.dll is less than 10.0.6714.0
  • BACK