Microsoft Producer vulnerabilities

2 CVEs affecting Microsoft Producer, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-0265, published 2010-03-10.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2004-0200, published 2004-09-28. High severity, CVSS 9.3. EPSS: 49% chance of exploitation in the next 30 days. Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with…
• CVE-2010-0265, published 2010-03-10. High severity, CVSS 9.3. EPSS: 26.6% chance of exploitation in the next 30 days. Buffer overflow in Microsoft Windows Movie Maker 2.1, 2.6, and 6.0, and Microsoft Producer 2003, allows remote attackers to execute arbitrary code via a crafted project (.MSWMM) file, aka "Movie…