CVE-2009-3678

The record

Integer overflow in cdd.dll in the Canonical Display Driver (CDD) in Microsoft Windows Server 2008 R2 and Windows 7 on 64-bit platforms, when the Windows Aero theme is installed, allows context-dependent attackers to cause a denial of service (reboot) or possibly execute arbitrary code via a crafted image file that triggers incorrect data parsing after user-mode data is copied to kernel mode, as demonstrated using "Browse with Irfanview" and certain actions on a folder containing a large number of thumbnail images in Resample mode, possibly related to the ATI graphics driver or win32k.sys, aka "Canonical Display Driver Integer Overflow Vulnerability."

Affected packages

Related vulnerabilities

• CVE-2026-102621 A vulnerability was identified in Freedesktop Poppler up to 26.08.0. CWE-189
• CVE-2026-102620 A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. CWE-189
• CVE-2026-93314 A vulnerability was determined in Freedesktop Poppler 26.07.0. CWE-189
• CVE-2026-93313 A vulnerability was found in Freedesktop Poppler 26.07.0. CWE-189
• CVE-2026-93311 A vulnerability was detected in Freedesktop Poppler 26.07.0. CWE-189
• CVE-2026-86297 A vulnerability was identified in D-Link DIR-605 B1v202WWB03. CWE-189
• CVE-2026-86289 A vulnerability was found in Ollama up to 0.31.1. CWE-189
• CVE-2026-82908 A vulnerability was found in MSI Dragon Center up to 2.0.155.0. CWE-189