PT-2007-3119 · Microsoft+1 · Windows Vista+1

Publicado 2007-03-30 · Atualizado 2017-07-29 · CVE-2007-1763

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista

Description: The issue allows user-assisted remote attackers to cause a denial of service, resulting in a system crash, by using a crafted JPG image. This could be due to a buffer overflow in the ATI kernel driver.

Recommendations: For Microsoft Windows Vista, consider avoiding the use of crafted JPG images until a fix is available. As a temporary workaround, restrict the use of the atikmdag.sys driver to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-1763

Produtos afetados

Ati Kernel Driver

Windows Vista

Referências · 8

• http://securityvulns.com/news/Microsoft/Vista/ATI.html · Nota
• http://osvdb.org/33635 · Nota
• http://archives.neohapsis.com/archives/vulnwatch/2007-q1/0077.html · Nota
• http://secunia.com/advisories/24667 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33300 · Nota
• http://leovilletownsquare.com/fusionbb/showtopic.php?fid/27/tid/17600 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1763 · Nota de Segurança
• http://vupen.com/english/advisories/2007/1160 · Nota