# CVEs published 2007-04-04

8 CVEs were published on April 4, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2006-5586](https://cve.now/CVE-2006-5586.md): The Graphics Rendering Engine in Microsoft Windows 2000 SP4 and XP SP2 allows local users to gain privileges via "invalid application window (no CVSS)
- [CVE-2007-1211](https://cve.now/CVE-2007-1211.md): Unspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1, and SP2 allows user-assisted remote attac (no CVSS)
- [CVE-2007-1212](https://cve.now/CVE-2007-1212.md): Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, and SP2; and Vista allo (no CVSS)
- [CVE-2007-1213](https://cve.now/CVE-2007-1213.md): The TrueType Fonts rasterizer in Microsoft Windows 2000 SP4 allows local users to gain privileges via crafted TrueType fonts, which result i (no CVSS)
- [CVE-2007-1215](https://cve.now/CVE-2007-1215.md): Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, and SP2; and Vista allo (no CVSS)
- [CVE-2007-1866](https://cve.now/CVE-2007-1866.md): Stack-based buffer overflow in the dns\_decode\_reverse\_name function in dns\_decode.c in dproxy-nexgen allows remote attackers to execute arbi (no CVSS)
- [CVE-2007-1867](https://cve.now/CVE-2007-1867.md): Buffer overflow in IrfanView 3.99 allows remote attackers to execute arbitrary code via a crafted animated cursor (ANI) file. (no CVSS)
- [CVE-2007-1868](https://cve.now/CVE-2007-1868.md): The management service in IBM Tivoli Provisioning Manager for OS Deployment before 5.1 Fix Pack 2 does not properly handle multipart/form-da (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-04-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.