CVE

Id
26391  
CVE No.
CVE-2007-3034  
Status
Candidate  
Description
Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted metafile (image) with a large record length value, which triggers a heap-based buffer overflow.  
Phase
Assigned (20070605)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
267331 26391 CVE-2007-3034 BUGTRAQ:20070814 EEYE: Windows Metafile AttemptWrite Heap Overflow  View
267332 26391 CVE-2007-3034 URL:http://www.securityfocus.com/archive/1/archive/1/476505/100/0/threaded  View
267333 26391 CVE-2007-3034 MS:MS07-046  View
267334 26391 CVE-2007-3034 URL:http://www.microsoft.com/technet/security/bulletin/ms07-046.mspx  View
267335 26391 CVE-2007-3034 CERT:TA07-226A  View
267336 26391 CVE-2007-3034 URL:http://www.us-cert.gov/cas/techalerts/TA07-226A.html  View
267337 26391 CVE-2007-3034 CERT-VN:VU#640136  View
267338 26391 CVE-2007-3034 URL:http://www.kb.cert.org/vuls/id/640136  View
267339 26391 CVE-2007-3034 BID:25302  View
267340 26391 CVE-2007-3034 URL:http://www.securityfocus.com/bid/25302  View
267341 26391 CVE-2007-3034 VUPEN:ADV-2007-2870  View
267342 26391 CVE-2007-3034 URL:http://www.vupen.com/english/advisories/2007/2870  View
267343 26391 CVE-2007-3034 OVAL:oval:org.mitre.oval:def:2088  View
267344 26391 CVE-2007-3034 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2088  View
267345 26391 CVE-2007-3034 SECTRACK:1018563  View
267346 26391 CVE-2007-3034 URL:http://www.securitytracker.com/id?1018563  View
267347 26391 CVE-2007-3034 SECUNIA:26423  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52017 JVNDB-2007-000680 Windows Services for UNIX / UNIX ベースアプリケーション用サブシステムにおける権限昇格の脆弱性 Windows Services for UNIX および UNIX ベースアプリケーション用サブシステムには setuid バイナリファイルに関連する権限昇格の脆弱性が存在します。 CVE-2007-3036 26391 6.9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000680.html  View