CVE-2004-0566 Information

Description

Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits value.

Reference

http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0806.html http://www.kb.cert.org/vuls/id/266926 http://www.us-cert.gov/cas/techalerts/TA04-212A.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-025 https://exchange.xforce.ibmcloud.com/vulnerabilities/15210 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A216 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A306 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A322 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A507 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A515