CVE-2007-1212

2007-04-0416:19:00

[email protected]

web.nvd.nist.gov

CVSS2

6.6

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:S/C:C/I:C/A:C

AI Score

6.4

Confidence

High

EPSS

Percentile

10.3%

JSON

Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, and SP2; and Vista allows local users to gain privileges via a crafted Enhanced Metafile (EMF) image format file.

Affected configurations

Nvd

Node

microsoftwindows_2000sp4

microsoftwindows_2003_serverMatchgold

microsoftwindows_2003_serverMatchgolditanium

microsoftwindows_2003_serverMatchgoldx64

microsoftwindows_2003_serverMatchsp1

microsoftwindows_2003_serverMatchsp1itanium

microsoftwindows_2003_serverMatchsp2

microsoftwindows_2003_serverMatchsp2itanium

microsoftwindows_2003_serverMatchsp2x64

microsoftwindows_vistagold

microsoftwindows_vistagoldx64

microsoftwindows_xpgoldprofessional_x64

microsoftwindows_xpsp2

microsoftwindows_xpsp2professional_x64

VendorProductVersionCPE
microsoftwindows_2000*cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
microsoftwindows_2003_servergoldcpe:2.3:o:microsoft:windows_2003_server:gold:*:*:*:*:*:*:*
microsoftwindows_2003_servergoldcpe:2.3:o:microsoft:windows_2003_server:gold:*:itanium:*:*:*:*:*
microsoftwindows_2003_servergoldcpe:2.3:o:microsoft:windows_2003_server:gold:*:x64:*:*:*:*:*
microsoftwindows_2003_serversp1cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*
microsoftwindows_2003_serversp1cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:*
microsoftwindows_2003_serversp2cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*
microsoftwindows_2003_serversp2cpe:2.3:o:microsoft:windows_2003_server:sp2:*:itanium:*:*:*:*:*
microsoftwindows_2003_serversp2cpe:2.3:o:microsoft:windows_2003_server:sp2:*:x64:*:*:*:*:*
microsoftwindows_vista*cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_2000	*	cpe:2.3:o:microsoft:windows_2000::sp4::::::*
microsoft	windows_2003_server	gold	cpe:2.3:o:microsoft:windows_2003_server:gold:::::::*
microsoft	windows_2003_server	gold	cpe:2.3:o:microsoft:windows_2003_server:gold::itanium:::::
microsoft	windows_2003_server	gold	cpe:2.3:o:microsoft:windows_2003_server:gold::x64:::::
microsoft	windows_2003_server	sp1	cpe:2.3:o:microsoft:windows_2003_server:sp1:::::::*
microsoft	windows_2003_server	sp1	cpe:2.3:o:microsoft:windows_2003_server:sp1::itanium:::::
microsoft	windows_2003_server	sp2	cpe:2.3:o:microsoft:windows_2003_server:sp2:::::::*
microsoft	windows_2003_server	sp2	cpe:2.3:o:microsoft:windows_2003_server:sp2::itanium:::::
microsoft	windows_2003_server	sp2	cpe:2.3:o:microsoft:windows_2003_server:sp2::x64:::::
microsoft	windows_vista	*	cpe:2.3:o:microsoft:windows_vista::gold::::::*