CVE-2007-2787

Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL ActiveX control in LeadTools Raster Thumbnail Object Library 14.5.0.44 allows remote attackers to execute arbitrary code via a long argument.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2007-05-21

Last modified

2024-08-07

Affected products

• Leadtools Raster Thumbnail Object Library (Lead Technologies)

References

• http://moaxb.blogspot.com/2007/05/moaxb-19-leadtools-thumbnail-browser.html
• http://moaxb.blogspot.com/2007/05/moaxb-20-leadtools-raster-thumbnail.html
• http://osvdb.org/36028
• http://osvdb.org/36029
• http://secunia.com/advisories/25331
• http://secunia.com/advisories/25376
• http://www.securityfocus.com/bid/24053
• http://www.securityfocus.com/bid/24057
• http://www.shinnai.altervista.org/moaxb/20070519/lademthumbtxt.html
• http://www.shinnai.altervista.org/moaxb/20070520/leadrastertxt.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34378
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34379
• https://www.exploit-db.com/exploits/3951
• https://www.exploit-db.com/exploits/3952