Technical Cyber Security Alert TA04-260A – Microsoft’s Graphic Device Interface Plus (GDI+) contains a vulnerability in the processing of JPEG images. This vulnerability may allow attackers to remotely execute arbitrary code on the affected system. Exploitation may occur as the result of viewing a malicious web site, reading an HTML-rendered email message, or opening a crafted JPEG image in any vulnerable application. The privileges gained by a remote attacker depend on the software component being attacked.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/34391/TA04-260A.txt
Source: https://packetstormsecurity.com/files/34391/Technical-Cyber-Security-Alert-2004-260A.html