CVE-2008-2160

EUVD-2008-2157
Multiple unspecified vulnerabilities in the JPEG (GDI+) and GIF image processing in Microsoft Windows CE 5.0 allow remote attackers to execute arbitrary code via crafted (1) JPEG and (2) GIF images.
Code Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 97%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_embedded_compact
5.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/30197
http://support.microsoft.com/kb/948812
http://www.securityfocus.com/bid/29147
http://www.securitytracker.com/id?1020007
http://www.vupen.com/english/advisories/2008/1469/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/42334
http://secunia.com/advisories/30197
http://support.microsoft.com/kb/948812
http://www.securityfocus.com/bid/29147
http://www.securitytracker.com/id?1020007
http://www.vupen.com/english/advisories/2008/1469/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/42334