CVE-2007-1215

2007-04-0416:19:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2007-1215

buffer overflow

gdi

microsoft windows

privilege escalation

6.6 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

9.5%

JSON

Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, and SP2; and Vista allows local users to gain privileges via certain “color-related parameters” in crafted images.

CPENameOperatorVersion
microsoft:windows_2003_servermicrosoft windows 2003 servereqsp2
microsoft:windows_2003_servermicrosoft windows 2003 servereqsp1
microsoft:windows_xpmicrosoft windows xpeq*
microsoft:windows_vistamicrosoft windows vistaeq*
microsoft:windows_2000microsoft windows 2000eq*
microsoft:windows_2003_servermicrosoft windows 2003 servereqgold

CPE	Name	Operator	Version
microsoft:windows_2003_server	microsoft windows 2003 server	eq	sp2
microsoft:windows_2003_server	microsoft windows 2003 server	eq	sp1
microsoft:windows_xp	microsoft windows xp	eq	*
microsoft:windows_vista	microsoft windows vista	eq	*
microsoft:windows_2000	microsoft windows 2000	eq	*
microsoft:windows_2003_server	microsoft windows 2003 server	eq	gold