PT-2007-2633 · Microsoft · Windows 2000+3

Publicado 2007-04-04 · Atualizado 2018-10-16 · CVE-2007-1211

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 2000 SP4, XP SP2, and Server 2003 Gold, SP1, and SP2

Description A denial of service issue exists when rendering Windows Metafile (WMF) image format files, allowing remote attackers to cause the affected system to stop responding and possibly restart. This issue is related to the handling of unspecified kernel GDI functions.

Recommendations For Microsoft Windows 2000 SP4, consider applying a patch or workaround to fix the issue with handling Windows Metafile images. For Microsoft Windows XP SP2, apply a configuration change to prevent the system from rendering malicious WMF images. For Microsoft Windows Server 2003 Gold, SP1, and SP2, restrict access to WMF image rendering until a patch is available.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2007-1211

Produtos afetados

Windows

Windows 2000

Windows Server 2003

Windows Xp

Referências · 17

• 🔥 https://exploit-db.com/exploits/3755 · Exploit
• 🔥 https://exploit-db.com/exploits/3688 · Exploit
• 🔥 https://exploit-db.com/exploits/3804 · Exploit
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=499 · Nota
• http://securityfocus.com/bid/23275 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-017 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33258 · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2007/ms07-017 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1571 · Nota
• http://securitytracker.com/id?1017843 · Nota
• http://securityfocus.com/archive/1/466186/100/200/threaded · Aviso do Fabricante
• http://frsirt.com/english/advisories/2007/1215 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1211 · Nota de Segurança
• http://xforce.iss.net/xforce/xfdb/33258 · Nota
• http://vupen.com/english/advisories/2007/1215 · Aviso do Fabricante