PT-2007-2633 · Microsoft · Windows 2000+3

Published 2007-04-04 · Updated 2018-10-16 · CVE-2007-1211

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 2000 SP4, XP SP2, and Server 2003 Gold, SP1, and SP2

Description A denial of service issue exists when rendering Windows Metafile (WMF) image format files, allowing remote attackers to cause the affected system to stop responding and possibly restart. This issue is related to the handling of unspecified kernel GDI functions.

Recommendations For Microsoft Windows 2000 SP4, consider applying a patch or workaround to fix the issue with handling Windows Metafile images. For Microsoft Windows XP SP2, apply a configuration change to prevent the system from rendering malicious WMF images. For Microsoft Windows Server 2003 Gold, SP1, and SP2, restrict access to WMF image rendering until a patch is available.

Exploit

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2007-1211

Affected Products

Windows

Windows 2000

Windows Server 2003

Windows Xp

References · 17

• 🔥 https://exploit-db.com/exploits/3755 · Exploit
• 🔥 https://exploit-db.com/exploits/3688 · Exploit
• 🔥 https://exploit-db.com/exploits/3804 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-017 · Vendor Advisory
• http://securityfocus.com/archive/1/466186/100/200/threaded · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1211 · Security Note
• http://vupen.com/english/advisories/2007/1215 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1211 · Security Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=499 · Note
• http://securityfocus.com/bid/23275 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33258 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2007/ms07-017 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1571 · Note
• http://securitytracker.com/id?1017843 · Note
• http://frsirt.com/english/advisories/2007/1215 · Note