| Patch Name : |
office2003-kb838905-fullfile-enu.exe |
| Patch Description : |
Office 2003 Security Update: KB838905 |
| Bulletin Id : |
MS04-028 |
| Bulletin Title : |
Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987) |
| KnowledgeBase : | 838905 |
| Severity : |
Critical |
| Location Path : | office2003-kb838905-fullfile-enu.exe |
| Bulletin Summary: |
This update resolves a newly-discovered, privately reported vulnerability. A buffer overrun vulnerability exists in the processing of JPEG image formats that could allow remote code execution on an affected system. The vulnerability is documented in this bulletin in its own section.
If a user is logged on with administrator privileges, an attacker who successfully exploited this vulnerability could take complete control of an affected system, including installing programs; viewing, changing, or deleting data; or creating new accounts with full privileges. Users whose accounts are configured to have fewer privileges on the system would be at less risk than users who operate with administrative privileges. |
| Superceding Bulletin Id : |
None |
| Patch Release Date : |
Sep 14, 2004 |
| CVE Id : | CAN-2004-0200 |
| Affected Product Information |
|
| Product Name |
Service Pack Name |
| Office 2003 | Office 2003 Gold |
|
| File changes |
|
| File Path |
Version |
| %#HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\11.0\Common\InstallRoot#Path%\gdiplus.dll | 6.0.3264.0 |
|
| Registry changes |
|
| Registry Path |
Key Name |
Key Value |
| No records found | | |
