CVE-2007-1211

Unspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1, and SP2 allows user-assisted remote attackers to cause a denial of service (possibly persistent restart) via a crafted Windows Metafile (WMF) image that causes an invalid dereference of an offset in a kernel structure, a related issue to CVE-2005-4560.

Affected products

Windows, Windows 2000, Windows Server 2003, Windows Xp

Microsoft Windows 2000

All versions

Microsoft Windows 2003 Server

= gold, SP1, SP2

Microsoft Windows Xp

All versions

Fix

Available

CVSS 2.0

7.1 HIGH

EPSS

29.1% (98th percentile)

Weakness

CWE-399

NVD status

Modified

Published

2007-04-04