CVE-2004-0209

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 57.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-10-16 · updated 2026-06-16

Description

Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats that involve "an unchecked buffer."

Affected products

Microsoft Windows 2000: all versions
Microsoft Windows 2003 Server: r2
Microsoft Windows XP Service Pack 3: all versions

References

http://marc.info/?l=bugtraq&m=109829067325779&w=2
http://www.kb.cert.org/vuls/id/806278
http://www.securityfocus.com/bid/11375
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-032
https://exchange.xforce.ibmcloud.com/vulnerabilities/16581
https://exchange.xforce.ibmcloud.com/vulnerabilities/17658
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1872
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2114
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2428
http://marc.info/?l=bugtraq&m=109829067325779&w=2
http://www.kb.cert.org/vuls/id/806278
http://www.securityfocus.com/bid/11375

Get alerted when CVE-2004-0209 or the next vulnerability affects your stack