CVE-2007-3034

published 2007-08-14

CVE-2007-3034: Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 allows remote…

Priority P2 63 critical 9.3 CVSS 2.0

AV N AC M Au N C C I C A C

EXPLOIT

Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted metafile (image) with a large record length value, which triggers a heap-based buffer overflow.

Detection & IOCs extracted from sources · hover to see the quote

filename ms07-046.wmf↗

• → Crafted WMF/metafile with a large record length value triggers integer overflow in GDI32.dll AttemptWrite function, leading to heap-based buffer overflow; inspect WMF files for anomalously large record length fields. ↗
• → Vulnerable component is GDI32.dll version 5.1.2600.3099 on Windows XP SP2; flag processes loading this specific DLL version parsing untrusted WMF files. ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-189