Buffer Overflow in Microsoft GDI+ JPEG Parsing Engine

CVE-2004-0200

Summary

A vulnerability exists in the JPEG parsing engine of Microsoft GDI+ (GDIPlus.dll), which can be exploited by remote attackers by crafting a malicious JPEG image. Through a specific manipulation of the JPEG COM field length, attackers can trigger a buffer overflow during a memory copy operation, potentially allowing the execution of arbitrary code on the vulnerable system.

References