Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL ActiveX control in LeadTools Raster Thumb…

Exploit prediction (EPSS)

7.50% probability of exploitation in the next 30 days, higher than 95% of all scored CVEs.

Exploits and detections

• EDB-3952 LeadTools Raster Thumbnail Object Library - 'LTRTM14e.dll' Remote Buffer Overflow · remote · 2007-05-18
• EDB-3951 LeadTools Thumbnail Browser Control - 'lttmb14E.ocx' Remote Buffer Overflow · remote · 2007-05-18

CVSS scores

References

• moaxb.blogspot.com /2007/05/moaxb-20-leadtools-raster-thumbnail.html · x_refsource_MISC, x_transferred
• osvdb.org /36028 · vdb-entry, x_refsource_OSVDB, x_transferred
• secunia.com /advisories/25331 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• shinnai.altervista.org /moaxb/20070520/leadrastertxt.html · x_refsource_MISC, x_transferred
• securityfocus.com /bid/24057 · vdb-entry, x_refsource_BID, x_transferred
• moaxb.blogspot.com /2007/05/moaxb-19-leadtools-thumbnail-browser.html · x_refsource_MISC, x_transferred
• shinnai.altervista.org /moaxb/20070519/lademthumbtxt.html · x_refsource_MISC, x_transferred
• exchange.xforce.ibmcloud.com /vulnerabilities/34379 · vdb-entry, x_refsource_XF, x_transferred
• osvdb.org /36029 · vdb-entry, x_refsource_OSVDB, x_transferred
• secunia.com /advisories/25376 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• exchange.xforce.ibmcloud.com /vulnerabilities/34378 · vdb-entry, x_refsource_XF, x_transferred
• securityfocus.com /bid/24053 · vdb-entry, x_refsource_BID, x_transferred
• exploit-db.com /exploits/3952 · exploit, x_refsource_EXPLOIT-DB, x_transferred
• exploit-db.com /exploits/3951 · exploit, x_refsource_EXPLOIT-DB, x_transferred

Sources

• CVE List: CVE-2007-2787
• NVD: CVE-2007-2787

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.