← Database

CVE-2010-0028

CRITICAL CVSS: 9.3 Published: 2010-02-10 Modified: 2026-06-16

Description

Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted JPEG (.JPG) file, aka "MS Paint Integer Overflow Vulnerability."

Affected Platforms

Microsoft Windows Server 2003Microsoft Windows 2000Microsoft Windows Xp

Weakness Type

CWE-189

References