CVE-2004-0566

Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits value.

• http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0806.htmlExploit, Vendor Advisory
• http://www.kb.cert.org/vuls/id/266926US Government Resource
• http://www.us-cert.gov/cas/techalerts/TA04-212A.htmlThird Party Advisory, US Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-025
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15210
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A216
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A306
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A322
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A507
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A515
• http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0806.htmlExploit, Vendor Advisory
• http://www.kb.cert.org/vuls/id/266926US Government Resource
• http://www.us-cert.gov/cas/techalerts/TA04-212A.htmlThird Party Advisory, US Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-025
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15210
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A216
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A306
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A322
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A507
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A515

Published

Jul 27, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0560Integer overflow in gopher daemon (gopherd) 3.0.3 allows rem…
• CVE-2004-0561Format string vulnerability in the log routine for gopher da…
• CVE-2004-0562Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2004-0563The tspc.conf configuration file in freenet6 before 0.9.6 an…
• CVE-2004-0564Roaring Penguin pppoe (rp-ppoe), if installed or configured …
• CVE-2004-0565Floating point information leak in the context switch code f…
• CVE-2004-0567The Windows Internet Naming Service (WINS) in Windows NT Ser…
• CVE-2004-0568HyperTerminal application for Windows NT 4.0, Windows 2000, …
• CVE-2004-0569The RPC Runtime Library for Microsoft Windows NT 4.0 allows …
• CVE-2004-0571Microsoft Word for Windows 6.0 Converter does not properly v…
• CVE-2004-0572Buffer overflow in the Windows Program Group Converter (grpc…
• CVE-2004-0573Buffer overflow in the converter for Microsoft WordPerfect 5…