CVE-2007-3034

Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted metafile (image) with a large record length value, which triggers a heap-based buffer overflow.

• CWE-189

• http://secunia.com/advisories/26423Vendor Advisory
• http://www.kb.cert.org/vuls/id/640136US Government Resource
• http://www.securityfocus.com/archive/1/476505/100/0/threaded
• http://www.securityfocus.com/bid/25302Patch
• http://www.securitytracker.com/id?1018563
• http://www.us-cert.gov/cas/techalerts/TA07-226A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2007/2870Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-046
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2088
• http://secunia.com/advisories/26423Vendor Advisory
• http://www.kb.cert.org/vuls/id/640136US Government Resource
• http://www.securityfocus.com/archive/1/476505/100/0/threaded
• http://www.securityfocus.com/bid/25302Patch
• http://www.securitytracker.com/id?1018563
• http://www.us-cert.gov/cas/techalerts/TA07-226A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2007/2870Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-046
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2088

Published

Aug 14, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-3028The LDAP service in Windows Active Directory in Microsoft Wi…
• CVE-2007-3029Unspecified vulnerability in Microsoft Excel 2002 SP3 and 20…
• CVE-2007-3030Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewe…
• CVE-2007-3031Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2007-3032Unspecified vulnerability in Windows Vista Contacts Gadget i…
• CVE-2007-3033Cross-site scripting (XSS) vulnerability in Windows Vista Fe…
• CVE-2007-3035Unspecified vulnerability in Microsoft Windows Media Player …
• CVE-2007-3036Unspecified vulnerability in the (1) Windows Services for UN…
• CVE-2007-3037Microsoft Windows Media Player 7.1, 9, 10, and 11 allows rem…
• CVE-2007-3038The Teredo interface in Microsoft Windows Vista and Vista x6…
• CVE-2007-3039Stack-based buffer overflow in the Microsoft Message Queuing…
• CVE-2007-3040Stack-based buffer overflow in agentdpv.dll 2.0.0.3425 in Mi…