Vulnerability in N/a

CVE-2007-3034

Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted metafile (image) with a large recor…

EPSS: 0.781 (99.0th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

MS07-046 (x_refsource_MS, vendor-advisory)
20070814 EEYE: Windows Metafile AttemptWrite Heap Overflow (mailing-list, x_refsource_BUGTRAQ)
TA07-226A (x_refsource_CERT, third-party-advisory)
VU#640136 (x_refsource_CERT-VN, third-party-advisory)
26423 (x_refsource_SECUNIA, third-party-advisory)
1018563 (vdb-entry, x_refsource_SECTRACK)
25302 (vdb-entry, x_refsource_BID)
ADV-2007-2870 (vdb-entry, x_refsource_VUPEN)
oval:org.mitre.oval:def:2088 (x_refsource_OVAL, signature, vdb-entry)