CVE-2007-1215

Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, and SP2; and Vista allows local users to gain privileges via certain "color-related parameters" in crafted images.

Affected products

Windows

Microsoft Windows 2000

All versions

Microsoft Windows 2003 Server

= gold, SP1, SP2

Microsoft Windows Vista

All versions

Microsoft Windows Xp

All versions

CVSS 2.0

7.2 HIGH

EPSS

2.7% (85th percentile)

NVD status

Modified

Published

2007-04-04