CVE-2010-0028

Description

Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted JPEG (.JPG) file, aka MS Paint Integer Overflow Vulnerability.

Risk Information

Base Score

7.8

MODERATE

Vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

69.244

Associated Vulnerability

Vulnerability	OS Platform
ms10-005: vulnerability in microsoft paint could allow remote code execution for Windows 2000 (KB978706)	Windows
ms10-005: vulnerability in microsoft paint could allow remote code execution for Windows XP (KB978706) x86 based systems	Windows
ms10-005: vulnerability in microsoft paint could allow remote code execution for Windows XP (KB978706) x86 based systems for SP3	Windows
ms10-005: vulnerability in microsoft paint could allow remote code execution for Windows Server 2003 (KB978706)	Windows
ms10-005: vulnerability in microsoft paint could allow remote code execution for Windows XP x64 Edition (KB978706)	Windows
ms10-005: vulnerability in microsoft paint could allow remote code execution for Windows Server 2003 x64 Edition (KB978706)	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234