VulnerabilityModified
CVE-2007-0326
Multiple stack-based buffer overflows in the PhotoChannel Networks PNI Digital Media Photo Upload Plugin ActiveX control before 2.0.0.10, as used by multiple retailers, allow remote attackers to execute arbitrary code via unspecified vectors.
HIGH 9.3EPSS 6.71%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (6.71%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Multiple stack-based buffer overflows in the PhotoChannel Networks PNI Digital Media Photo Upload Plugin ActiveX control before 2.0.0.10, as used by multiple retailers, allow remote attackers to execute arbitrary code via unspecified vectors.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 6.71% probability · 94th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- photochannel/pni digital media upload plugin activex control
- Source
- cret@cert.org
References
- http://osvdb.org/37958
- http://secunia.com/advisories/26830
- http://www.kb.cert.org/vuls/id/854769Patch, US Government Resource
- http://www.securityfocus.com/bid/25685
- http://www.securitytracker.com/id?1018701
- http://www.vupen.com/english/advisories/2007/3181
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36643
- http://osvdb.org/37958
- http://secunia.com/advisories/26830
- http://www.kb.cert.org/vuls/id/854769Patch, US Government Resource
- http://www.securityfocus.com/bid/25685
- http://www.securitytracker.com/id?1018701
- http://www.vupen.com/english/advisories/2007/3181
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36643
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.