CVEvulnerability
CVE-2007-3034
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-08-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted metafile (image) with a large record length value, which triggers a heap-based buffer overflow.
Affected configurations
• microsoft windows 2000
• microsoft windows 2003 server
• microsoft windows server 2003
• microsoft windows xp
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/26423 Vendor Advisory
- http://www.kb.cert.org/vuls/id/640136 US Government Resource
- http://www.securityfocus.com/archive/1/476505/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25302 Patch
- http://www.securitytracker.com/id?1018563 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA07-226A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/2870 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-046 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2088 oval.cisecurity.org
- http://secunia.com/advisories/26423 Vendor Advisory
- http://www.kb.cert.org/vuls/id/640136 US Government Resource
- http://www.securityfocus.com/archive/1/476505/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25302 Patch
- http://www.securitytracker.com/id?1018563 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA07-226A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/2870 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-046 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2088 oval.cisecurity.org