PT-2007-4155 · Lead Technologies · Leadtools Raster Variant Object Library

Shinnai · Publicado 2007-05-24 · Atualizado 2017-10-11 · CVE-2007-2851

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions LeadTools Raster Variant Object Library version 14.5.0.44

Description The issue allows remote attackers to overwrite arbitrary files. This is achieved through the WriteDataToFile method, which is part of the ActiveX control in the LeadTools Raster Variant Object Library.

Recommendations For version 14.5.0.44, consider disabling the WriteDataToFile method as a temporary workaround until a patch is available. Restrict access to the ActiveX control to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2007-2851

Produtos afetados

Leadtools Raster Variant Object Library

Referências · 6

• 🔥 http://securityfocus.com/bid/24075 · Exploit
• 🔥 https://exploit-db.com/exploits/3961 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34386 · Nota
• http://osvdb.org/36033 · Nota
• http://moaxb.blogspot.com/2007/05/moaxb-21-leadtools-raster-variant.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2851 · Nota de Segurança