Unscored severity · published May 22, 2007
CVE-2007-2814
Multiple stack-based buffer overflows in the Pegasus ImagN' ActiveX control (IMW32O40.OCX) 4.00.041 allow remote attackers to execute arbitrary code via (1) a long FileName…
–
CVSS
5.5%
EPSS
No
On KEV
Description
Multiple stack-based buffer overflows in the Pegasus ImagN' ActiveX control (IMW32O40.OCX) 4.00.041 allow remote attackers to execute arbitrary code via (1) a long FileName parameter, or unspecified vectors involving the (2) BeginReport, (3) CreatePictureExA, (4) DefineImage, (5) DefineImageEx, (6) DefineImageFox, (7) CopyBufToClipExA, (8) LoadEx, (9) LoadFox, and other functions.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.5% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IA
Imagn Activex Control · Pegasus
4.00.041 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2814
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2814
osvdb.org
http://osvdb.org/36518
retrogod.altervista.org
http://retrogod.altervista.org/IE_pegasus_imagn_bof.html
Vendor Advisory
http://secunia.com/advisories/25351
Exploit
http://www.securityfocus.com/bid/24086
www.vupen.com
http://www.vupen.com/english/advisories/2007/1899
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/34419