CVE-2007-2787 - Vulnerability Details - OpenCVE

Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL ActiveX control in LeadTools Raster Thumbnail Object Library 14.5.0.44 allows remote attackers to execute arbitrary code via a long argument.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.39796.

Key SSVC decision points have not yet been added.

Vendors	Products
Lead Technologies	Leadtools Raster Thumbnail Object Library

Configuration 1 [-]

cpe:2.3:a:lead_technologies:leadtools_raster_thumbnail_object_library:14.5.0.44:*:*:*:*:*:*:*

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://moaxb.blogspot.com/2007/05/moaxb-19-leadtools-thumbnail-browser.html
http://moaxb.blogspot.com/2007/05/moaxb-20-leadtools-raster-thumbnail.html
http://osvdb.org/36028
http://osvdb.org/36029
http://secunia.com/advisories/25331
http://secunia.com/advisories/25376
http://www.securityfocus.com/bid/24053
http://www.securityfocus.com/bid/24057
http://www.shinnai.altervista.org/moaxb/20070519/lademthumbtxt.html
http://www.shinnai.altervista.org/moaxb/20070520/leadrastertxt.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/34378
https://exchange.xforce.ibmcloud.com/vulnerabilities/34379
https://www.exploit-db.com/exploits/3951
https://www.exploit-db.com/exploits/3952

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-05-21T23:00:00

Updated: 2024-08-07T13:49:57.513Z

Reserved: 2007-05-21T00:00:00

Link: CVE-2007-2787

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2007-05-21T23:30:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2007-2787

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-05-18T00:00:00", "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL ActiveX control in LeadTools Raster Thumbnail Object Library 14.5.0.44 allows remote attackers to execute arbitrary code via a long argument."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-10-10T00:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://moaxb.blogspot.com/2007/05/moaxb-20-leadtools-raster-thumbnail.html"}, {"name": "36028", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/36028"}, {"name": "25331", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/25331"}, {"tags": ["x_refsource_MISC"], "url": "http://www.shinnai.altervista.org/moaxb/20070520/leadrastertxt.html"}, {"name": "24057", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/24057"}, {"tags": ["x_refsource_MISC"], "url": "http://moaxb.blogspot.com/2007/05/moaxb-19-leadtools-thumbnail-browser.html"}, {"tags": ["x_refsource_MISC"], "url": "http://www.shinnai.altervista.org/moaxb/20070519/lademthumbtxt.html"}, {"name": "leadtools-lttmb14e-bo(34379)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34379"}, {"name": "36029", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/36029"}, {"name": "25376", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/25376"}, {"name": "leadtools-ltrtm14e-bo(34378)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34378"}, {"name": "24053", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/24053"}, {"name": "3952", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "https://www.exploit-db.com/exploits/3952"}, {"name": "3951", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "https://www.exploit-db.com/exploits/3951"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-2787", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL ActiveX control in LeadTools Raster Thumbnail Object Library 14.5.0.44 allows remote attackers to execute arbitrary code via a long argument."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://moaxb.blogspot.com/2007/05/moaxb-20-leadtools-raster-thumbnail.html", "refsource": "MISC", "url": "http://moaxb.blogspot.com/2007/05/moaxb-20-leadtools-raster-thumbnail.html"}, {"name": "36028", "refsource": "OSVDB", "url": "http://osvdb.org/36028"}, {"name": "25331", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/25331"}, {"name": "http://www.shinnai.altervista.org/moaxb/20070520/leadrastertxt.html", "refsource": "MISC", "url": "http://www.shinnai.altervista.org/moaxb/20070520/leadrastertxt.html"}, {"name": "24057", "refsource": "BID", "url": "http://www.securityfocus.com/bid/24057"}, {"name": "http://moaxb.blogspot.com/2007/05/moaxb-19-leadtools-thumbnail-browser.html", "refsource": "MISC", "url": "http://moaxb.blogspot.com/2007/05/moaxb-19-leadtools-thumbnail-browser.html"}, {"name": "http://www.shinnai.altervista.org/moaxb/20070519/lademthumbtxt.html", "refsource": "MISC", "url": "http://www.shinnai.altervista.org/moaxb/20070519/lademthumbtxt.html"}, {"name": "leadtools-lttmb14e-bo(34379)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34379"}, {"name": "36029", "refsource": "OSVDB", "url": "http://osvdb.org/36029"}, {"name": "25376", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/25376"}, {"name": "leadtools-ltrtm14e-bo(34378)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34378"}, {"name": "24053", "refsource": "BID", "url": "http://www.securityfocus.com/bid/24053"}, {"name": "3952", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/3952"}, {"name": "3951", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/3951"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T13:49:57.513Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://moaxb.blogspot.com/2007/05/moaxb-20-leadtools-raster-thumbnail.html"}, {"name": "36028", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/36028"}, {"name": "25331", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/25331"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.shinnai.altervista.org/moaxb/20070520/leadrastertxt.html"}, {"name": "24057", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/24057"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://moaxb.blogspot.com/2007/05/moaxb-19-leadtools-thumbnail-browser.html"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.shinnai.altervista.org/moaxb/20070519/lademthumbtxt.html"}, {"name": "leadtools-lttmb14e-bo(34379)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34379"}, {"name": "36029", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/36029"}, {"name": "25376", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/25376"}, {"name": "leadtools-ltrtm14e-bo(34378)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34378"}, {"name": "24053", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/24053"}, {"name": "3952", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "https://www.exploit-db.com/exploits/3952"}, {"name": "3951", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "https://www.exploit-db.com/exploits/3951"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-2787", "datePublished": "2007-05-21T23:00:00", "dateReserved": "2007-05-21T00:00:00", "dateUpdated": "2024-08-07T13:49:57.513Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:lead_technologies:leadtools_raster_thumbnail_object_library:14.5.0.44:*:*:*:*:*:*:*", "matchCriteriaId": "1AE8E24A-3F26-41EA-B6EE-A095315B3AF8", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL ActiveX control in LeadTools Raster Thumbnail Object Library 14.5.0.44 allows remote attackers to execute arbitrary code via a long argument."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer basado en pila en la funci\u00f3n BrowseDir en el control ActiveX(1) lttmb14E.ocx o (2) LTRTM14e.DLL en LeadTools Raster Thumbnail Object Library 14.5.0.44 permiet a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de argumentos largos."}], "id": "CVE-2007-2787", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-05-21T23:30:00.000", "references": [{"source": "cve@mitre.org", "url": "http://moaxb.blogspot.com/2007/05/moaxb-19-leadtools-thumbnail-browser.html"}, {"source": "cve@mitre.org", "url": "http://moaxb.blogspot.com/2007/05/moaxb-20-leadtools-raster-thumbnail.html"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/36028"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/36029"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/25331"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/25376"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/24053"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/24057"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.shinnai.altervista.org/moaxb/20070519/lademthumbtxt.html"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.shinnai.altervista.org/moaxb/20070520/leadrastertxt.html"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34378"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34379"}, {"source": "cve@mitre.org", "url": "https://www.exploit-db.com/exploits/3951"}, {"source": "cve@mitre.org", "url": "https://www.exploit-db.com/exploits/3952"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://moaxb.blogspot.com/2007/05/moaxb-19-leadtools-thumbnail-browser.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://moaxb.blogspot.com/2007/05/moaxb-20-leadtools-raster-thumbnail.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/36028"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/36029"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/25331"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/25376"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/24053"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/24057"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.shinnai.altervista.org/moaxb/20070519/lademthumbtxt.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.shinnai.altervista.org/moaxb/20070520/leadrastertxt.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34378"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34379"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.exploit-db.com/exploits/3951"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.exploit-db.com/exploits/3952"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}