CVE-2009-3678

Windows 7 and Windows Server 2008 - Denial of Service or Remote Code Execution via Crafted Image File

Title source: llm
STIX 2.1

Description

Integer overflow in cdd.dll in the Canonical Display Driver (CDD) in Microsoft Windows Server 2008 R2 and Windows 7 on 64-bit platforms, when the Windows Aero theme is installed, allows context-dependent attackers to cause a denial of service (reboot) or possibly execute arbitrary code via a crafted image file that triggers incorrect data parsing after user-mode data is copied to kernel mode, as demonstrated using "Browse with Irfanview" and certain actions on a folder containing a large number of thumbnail images in Resample mode, possibly related to the ATI graphics driver or win32k.sys, aka "Canonical Display Driver Integer Overflow Vulnerability."

References (14)

Core 14
Core References
Various Sources x_refsource_misc
http://isc.sans.org/diary.html?storyid=8809
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/64731
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7195
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/58622
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA10-194A.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/39577
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/40237
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/1178

Scores

EPSS 0.1261
EPSS Percentile 95.8%

Details

CWE
CWE-189
Status published
Products (2)
microsoft/windows_7
microsoft/windows_server_2008 r2
Published May 14, 2010
Tracked Since Feb 18, 2026