CVE-2007-2827

CRITICAL 9.3CVE-2007-2827 · Published 22/05/2007 · updated 16/06/2026

In short

CVE-2007-2827 is a CRITICAL (CVSS 9.3) vulnerability affecting leadtools isis activex control (lead technologies).
Chance of exploitation in the next 30 days (EPSS): 6.4%, higher than 93.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
leadtools isis activex control lead_technologies	`≤ 14.5.0.44`	No fix yet

Description

Heap-based buffer overflow in LEAD Technologies LEADTOOLS ISIS ActiveX Control (ltisi14E.ocx) 14.5.0.44 and earlier allows remote attackers to execute arbitrary code via a long DriverName property.

References

moaxb.blogspot.com/2007/05/moaxb-22-leadtools-isis-control.html
osvdb.org/36032
secunia.com/advisories/25349 · Vendor Advisory
securityfocus.com/bid/24093
shinnai.altervista.org/moaxb/20070522/leadisistxt.html
vupen.com/english/advisories/2007/1900 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/34437

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free