CVE-2007-2827

Heap-based buffer overflow in LEAD Technologies LEADTOOLS ISIS ActiveX Control (ltisi14E.ocx) 14.5.0.44 and earlier allows remote attackers to execute arbitrary code via a long DriverName property.

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2007-05-22

Last modified

2024-08-07

Weaknesses

CWE-119

Affected products

• Leadtools Isis Activex Control (Lead Technologies)

References

• http://moaxb.blogspot.com/2007/05/moaxb-22-leadtools-isis-control.html
• http://osvdb.org/36032
• http://secunia.com/advisories/25349
• http://www.securityfocus.com/bid/24093
• http://www.shinnai.altervista.org/moaxb/20070522/leadisistxt.html
• http://www.vupen.com/english/advisories/2007/1900
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34437