National Cyber Awareness System

Vulnerability Summary for CVE-2007-3034

Overview

Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted metafile (image) with a large record length value, which triggers a heap-based buffer overflow.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Technical Alert: TA07-226A

Name: TA07-226A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA07-226A.html

US-CERT Vulnerability Note: VU#640136

Name: VU#640136

Hyperlink:http://www.kb.cert.org/vuls/id/640136

External Source: BID

Name: 25302

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/25302

External Source: MS

Name: MS07-046

Type: Advisory; Patch Information; Exploit

Hyperlink:http://www.microsoft.com/technet/security/bulletin/ms07-046.mspx

External Source: VUPEN

Name: ADV-2007-2870

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2007/2870

External Source: SECTRACK

Name: 1018563

Hyperlink:http://www.securitytracker.com/id?1018563

External Source: BUGTRAQ

Name: 20070814 EEYE: Windows Metafile AttemptWrite Heap Overflow

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/476505/100/0/threaded

External Source: SECUNIA

Name: 26423

Type: Advisory

Hyperlink:http://secunia.com/advisories/26423

US Government Resource: oval:org.mitre.oval:def:2088

Name: oval:org.mitre.oval:def:2088

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2088

References to Check Content

Identifier:oval:org.mitre.oval:def:2088

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:2088