SCAN: Core Impact Internet Explorer JPEG GDI Exploit
This signature detects attempts to exploit the Microsoft JPEG GDI Core Impact's vulnerability mentioned in Microsoft Vulnerability Notice MS04-028. A successful attack can create a denial-of-service (DoS) condition or execute arbitrary code with user privileges.
Extended Description
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.
Affected Products
Microsoft visual_studio_.net
References
BugTraq: 11173
CVE: CVE-2004-0200
URL: http://www.microsoft.com/technet/security/bulletin/MS04-028.mspx http://www.kb.cert.org/vuls/id/297462
Short Name
SCAN:CORE:JPEG-GDI-VGX-EXPLOIT
Severity
Minor
Recommended
False
Recommended Action
Drop
Category
SCAN
Keywords
CVE-2004-0200 Core Exploit Explorer GDI Impact Internet JPEG bid:11173
Release Date
04/15/2005
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3761
False Positive
Unknown
Vendors
Microsoft
CVSS Score
9.3