CVE-2007-2055

HIGH 7.5CVE-2007-2055 · Published 30/04/2007 · updated 16/06/2026

In short

CVE-2007-2055 is a HIGH (CVSS 7.5) vulnerability affecting afflib (afflib).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
afflib afflib	`≤ 2.2.8`	No fix yet

Description

AFFLIB 2.2.8 and earlier allows attackers to execute arbitrary commands via shell metacharacters involving (1) certain command line parameters in tools/afconvert.cpp and (2) arguments to the get_parameter function in aimage/ident.cpp. NOTE: it is unknown if the get_parameter vector (2) is ever called.

References

osvdb.org/35608
securityreason.com/securityalert/2656
securityfocus.com/archive/1/467041/100/0/threaded
vsecurity.com/bulletins/advisories/2007/afflib-shellinject.txt
exchange.xforce.ibmcloud.com/vulnerabilities/33964

More vulnerabilities in afflib

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free