Sep 2004 Microsoft Security Bulletin:

• MS04-027 Vulnerability in WordPerfect Converter Could Allow Code Execution (884933).
• MS04-028 Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987).  This update resolves a newly-discovered, privately reported vulnerability. A buffer overrun vulnerability exists in the processing of JPEG image formats that could allow remote code execution on an affected system. The vulnerability is documented in this bulletin in its own section.  If a user is logged on with administrator privileges, an attacker who successfully exploited this vulnerability could take complete control of an affected system, including installing programs; viewing, changing, or deleting data; or creating new accounts with full privileges. Users whose accounts are configured to have fewer privileges on the system would be at less risk than users who operate with administrative privileges.

Updated On: 15.02.17