VulnerabilityModified
CVE-2007-2787
Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL ActiveX control in LeadTools Raster Thumbnail Object Library 14.5.0.44 allows remote attackers to execute arbitrary code via a long argument.
HIGH 7.5EPSS 7.50%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (7.50%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL ActiveX control in LeadTools Raster Thumbnail Object Library 14.5.0.44 allows remote attackers to execute arbitrary code via a long argument.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 7.50% probability · 94th percentile
- CISA KEV
- Not listed
- Affected
- lead technologies/leadtools raster thumbnail object library
- Source
- cve@mitre.org
References
- http://moaxb.blogspot.com/2007/05/moaxb-19-leadtools-thumbnail-browser.html
- http://moaxb.blogspot.com/2007/05/moaxb-20-leadtools-raster-thumbnail.html
- http://osvdb.org/36028
- http://osvdb.org/36029
- http://secunia.com/advisories/25331
- http://secunia.com/advisories/25376
- http://www.securityfocus.com/bid/24053
- http://www.securityfocus.com/bid/24057
- http://www.shinnai.altervista.org/moaxb/20070519/lademthumbtxt.htmlExploit
- http://www.shinnai.altervista.org/moaxb/20070520/leadrastertxt.htmlExploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34378
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34379
- https://www.exploit-db.com/exploits/3951
- https://www.exploit-db.com/exploits/3952
- http://moaxb.blogspot.com/2007/05/moaxb-19-leadtools-thumbnail-browser.html
- http://moaxb.blogspot.com/2007/05/moaxb-20-leadtools-raster-thumbnail.html
- http://osvdb.org/36028
- http://osvdb.org/36029
- http://secunia.com/advisories/25331
- http://secunia.com/advisories/25376
- http://www.securityfocus.com/bid/24053
- http://www.securityfocus.com/bid/24057
- http://www.shinnai.altervista.org/moaxb/20070519/lademthumbtxt.htmlExploit
- http://www.shinnai.altervista.org/moaxb/20070520/leadrastertxt.htmlExploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34378
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34379
- https://www.exploit-db.com/exploits/3951
- https://www.exploit-db.com/exploits/3952
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.