Microsoft Visual C++ vulnerabilities

6 CVEs affecting Microsoft Visual C++, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-3190, published 2010-08-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-0200, published 2004-09-28. High severity, CVSS 9.3. EPSS: 49% chance of exploitation in the next 30 days. Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with…
CVE-2009-2493, published 2009-07-29. High severity, CVSS 8.8. EPSS: 37.8% chance of exploitation in the next 30 days. The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2…
CVE-2009-0901, published 2009-07-29. High severity, CVSS 8.8. EPSS: 36.6% chance of exploitation in the next 30 days. The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3,…
CVE-2009-2495, published 2009-07-29. Medium severity, CVSS 6.5. EPSS: 34.3% chance of exploitation in the next 30 days. The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce…
CVE-2010-3190, published 2010-08-31. High severity, CVSS 7.8. EPSS: 8.7% chance of exploitation in the next 30 days. Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C++ 2005 SP1, 2008…
CVE-2007-0842, published 2007-02-13. Medium severity, CVSS 5.0. EPSS: 5.9% chance of exploitation in the next 30 days. The 64-bit versions of Microsoft Visual C++ 8.0 standard library (MSVCR80.DLL) time functions, including (1) localtime, (2) localtime_s, (3) gmtime, (4) gmtime_s, (5) ctime, (6) ctime_s, (7) wctime,…