CVE-2007-2209
Buffer overflow in igcore15d.dll 15.1.2.0 and 15.2.0.0 for AccuSoft ImageGear, as used in Corel Paint Shop Pro Photo 11.20 and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted .CLP file.
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 11.6%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflow in igcore15d.dll 15.1.2.0 and 15.2.0.0 for AccuSoft ImageGear, as used in Corel Paint Shop Pro Photo 11.20 and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted .CLP file. NOTE: some details were obtained from third party sources.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 11.59% probability · 96th percentile
- CISA KEV
- Not listed
- Affected
- accusoft/imagegear · corel/paint shop pro
- Source
- cve@mitre.org
References
- http://osvdb.org/35308
- http://osvdb.org/35386
- http://secunia.com/advisories/25016Vendor Advisory
- http://secunia.com/advisories/25050Vendor Advisory
- http://www.securityfocus.com/bid/23604
- http://www.securitytracker.com/id?1017963
- http://www.vupen.com/english/advisories/2007/1506
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33821
- https://www.exploit-db.com/exploits/3779
- http://osvdb.org/35308
- http://osvdb.org/35386
- http://secunia.com/advisories/25016Vendor Advisory
- http://secunia.com/advisories/25050Vendor Advisory
- http://www.securityfocus.com/bid/23604
- http://www.securitytracker.com/id?1017963
- http://www.vupen.com/english/advisories/2007/1506
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33821
- https://www.exploit-db.com/exploits/3779
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.