PT-2007-4124 · Pegasus · Pegasus Imagn' Activex Control

Publicado 2007-05-22 · Atualizado 2017-07-29 · CVE-2007-2814

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Pegasus ImagN' ActiveX control (IMW32O40.OCX) version 4.00.041

Description The issue is related to multiple stack-based buffer overflows that allow remote attackers to execute arbitrary code. This can be achieved via a long FileName parameter or through various functions such as BeginReport, CreatePictureExA, DefineImage, DefineImageEx, DefineImageFox, CopyBufToClipExA, LoadEx, and LoadFox.

Recommendations For Pegasus ImagN' ActiveX control (IMW32O40.OCX) version 4.00.041, consider disabling the affected functions until a patch is available. Restrict access to the FileName parameter to minimize the risk of exploitation. Avoid using the BeginReport, CreatePictureExA, DefineImage, DefineImageEx, DefineImageFox, CopyBufToClipExA, LoadEx, and LoadFox functions in the affected ActiveX control until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2007-2814

Produtos afetados

Pegasus Imagn' Activex Control

Referências · 8

• 🔥 http://securityfocus.com/bid/24086 · Exploit
• 🔥 https://exploit-db.com/exploits/3966 · Exploit
• http://secunia.com/advisories/25351 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-2814 · Nota de Segurança
• http://vupen.com/english/advisories/2007/1899 · Nota
• http://retrogod.altervista.org/IE_pegasus_imagn_bof.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34419 · Nota
• http://osvdb.org/36518 · Nota