CVE-2007-2787

HOCH 7.5CVE-2007-2787 · Published 21/05/2007 · updated 16/06/2026

Kurz gesagt

CVE-2007-2787 ist eine Schwachstelle (HOCH (CVSS 7.5)) in leadtools raster thumbnail object library (lead technologies).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 7.5%, höher als bei 94.5% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
leadtools raster thumbnail object library lead_technologies	`= 14.5.0.44`	No fix yet

Description

Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL ActiveX control in LeadTools Raster Thumbnail Object Library 14.5.0.44 allows remote attackers to execute arbitrary code via a long argument.

References

moaxb.blogspot.com/2007/05/moaxb-19-leadtools-thumbnail-browser.html
moaxb.blogspot.com/2007/05/moaxb-20-leadtools-raster-thumbnail.html
osvdb.org/36028
osvdb.org/36029
secunia.com/advisories/25331
secunia.com/advisories/25376
securityfocus.com/bid/24053
securityfocus.com/bid/24057
shinnai.altervista.org/moaxb/20070519/lademthumbtxt.html · Exploit
shinnai.altervista.org/moaxb/20070520/leadrastertxt.html · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/34378
exchange.xforce.ibmcloud.com/vulnerabilities/34379
exploit-db.com/exploits/3951
exploit-db.com/exploits/3952

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free