PT-2007-3556 · Microsoft+1 · Windows 2000+4

Published 2007-10-09 · Updated 2018-10-16 · CVE-2007-2217

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Kodak Image Viewer in Microsoft Windows versions 2000 SP4, XP SP2, Server 2003 SP1, and Server 2003 SP2

Description A remote code execution issue exists in the way the Kodak Image Viewer handles specially crafted image files, potentially allowing an attacker to execute arbitrary code via crafted image files that trigger memory corruption. This could be exploited if a user visits a Web site, views a specially crafted e-mail message, or opens an e-mail attachment, potentially allowing an attacker to take complete control of an affected system.

Recommendations For Windows 2000 SP4, update the Kodak Image Viewer to a version that is not affected by this issue. For Windows XP SP2, consider disabling the Kodak Image Viewer until a patch is available. For Windows Server 2003 SP1 and SP2, restrict access to the Kodak Image Viewer to minimize the risk of exploitation.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2007-2217

Affected Products

Kodak Image Viewer

Windows

Windows 2000

Windows Server 2003

Windows Xp

References · 15

• 🔥 https://exploit-db.com/exploits/4584 · Exploit
• 🔥 https://exploit-db.com/exploits/4616 · Exploit
• 🔥 http://securityfocus.com/bid/25909 · Exploit
• http://securityfocus.com/archive/1/482366/100/0/threaded · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2217 · Security Note
• http://secunia.com/advisories/27092 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-055 · Vendor Advisory
• http://vupen.com/english/advisories/2007/3435 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2217 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1481 · Note
• http://us-cert.gov/cas/techalerts/TA07-282A.html · Note
• http://kb.cert.org/vuls/id/180345 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2007/ms07-055 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36799 · Note
• http://securitytracker.com/id?1018784 · Note