CVE-2007-3034
NoneCVSS
—
EPSS
51.9%
Published
Aug 14, 2007
CISA due date
—
The record
Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted metafile (image) with a large record length value, which triggers a heap-based buffer overflow.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-102621 A vulnerability was identified in Freedesktop Poppler up to 26.08.0. CWE-189
- CVE-2026-102620 A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. CWE-189
- CVE-2026-93314 A vulnerability was determined in Freedesktop Poppler 26.07.0. CWE-189
- CVE-2026-93313 A vulnerability was found in Freedesktop Poppler 26.07.0. CWE-189
- CVE-2026-93311 A vulnerability was detected in Freedesktop Poppler 26.07.0. CWE-189
- CVE-2026-86297 A vulnerability was identified in D-Link DIR-605 B1v202WWB03. CWE-189
- CVE-2026-86289 A vulnerability was found in Ollama up to 0.31.1. CWE-189
- CVE-2026-82908 A vulnerability was found in MSI Dragon Center up to 2.0.155.0. CWE-189