Microsoft Greetings vulnerabilities

2 CVEs affecting Microsoft Greetings, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-0200, published 2004-09-28.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2004-0200, published 2004-09-28. High severity, CVSS 9.3. EPSS: 49% chance of exploitation in the next 30 days. Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with…
• CVE-2000-0200, published 2000-03-06. Medium severity, CVSS 5.1. EPSS: 15.7% chance of exploitation in the next 30 days. Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands via a malformed CIL (clip art library) file, aka the "Clip Art Buffer Overrun"…