CVE - CVE-2004-0566

CVE-ID
CVE-2004-0566	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits value.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
CERT:TA04-212A URL:http://www.us-cert.gov/cas/techalerts/TA04-212A.html CERT-VN:VU#266926 URL:http://www.kb.cert.org/vuls/id/266926 FULLDISC:20040215 GAYER THAN AIDS ADVISORY #01: IE 5 remote code execution URL:http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0806.html MS:MS04-025 URL:https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-025 OVAL:oval:org.mitre.oval:def:216 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A216 OVAL:oval:org.mitre.oval:def:306 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A306 OVAL:oval:org.mitre.oval:def:322 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A322 OVAL:oval:org.mitre.oval:def:507 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A507 OVAL:oval:org.mitre.oval:def:515 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A515 XF:ie-bmp-integer-overflow(15210) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/15210
Assigning CNA
MITRE Corporation
Date Record Created
20040615	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20040615)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)