PT-2007-3119 · Microsoft+1 · Windows Vista+1

Published 2007-03-30 · Updated 2017-07-29 · CVE-2007-1763

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista

Description: The issue allows user-assisted remote attackers to cause a denial of service, resulting in a system crash, by using a crafted JPG image. This could be due to a buffer overflow in the ATI kernel driver.

Recommendations: For Microsoft Windows Vista, consider avoiding the use of crafted JPG images until a fix is available. As a temporary workaround, restrict the use of the atikmdag.sys driver to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-1763

Affected Products

Ati Kernel Driver

Windows Vista

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-1763 · Security Note
• http://securityvulns.com/news/Microsoft/Vista/ATI.html · Note
• http://osvdb.org/33635 · Note
• http://archives.neohapsis.com/archives/vulnwatch/2007-q1/0077.html · Note
• http://secunia.com/advisories/24667 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33300 · Note
• http://leovilletownsquare.com/fusionbb/showtopic.php?fid/27/tid/17600 · Note
• http://vupen.com/english/advisories/2007/1160 · Note