| Patch Name : |
NDP1.1-KB830348-X86.exe |
| Patch Description : |
.NET Framework 1.1 GDIPLUS.DLL Security Update |
| Bulletin Id : |
MS04-028 |
| Bulletin Title : |
Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987) |
| KnowledgeBase : | 830348 |
| Severity : |
Critical |
| Location Path : | NDP1.1-KB830348-X86.exe |
| Bulletin Summary: |
This update resolves a newly-discovered, privately reported vulnerability. A buffer overrun vulnerability exists in the processing of JPEG image formats that could allow remote code execution on an affected system. The vulnerability is documented in this bulletin in its own section.
If a user is logged on with administrator privileges, an attacker who successfully exploited this vulnerability could take complete control of an affected system, including installing programs; viewing, changing, or deleting data; or creating new accounts with full privileges. Users whose accounts are configured to have fewer privileges on the system would be at less risk than users who operate with administrative privileges. |
| Superceding Bulletin Id : |
None |
| Patch Release Date : |
Sep 14, 2004 |
| CVE Id : | CAN-2004-0200 |
| Affected Product Information |
|
| Product Name |
Service Pack Name |
| .NET Framework 1.1 | .Net Framework 1.1 Gold |
|
| File changes |
|
| File Path |
Version |
| No records found | | |
| Registry changes |
|
| Registry Path |
Key Name |
Key Value |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{738B5D5A-253B-4F2D-BA88-E81508DE71E3} | | -2 |
|
