PT-2007-4124 · Pegasus · Pegasus Imagn' Activex Control

Published 2007-05-22 · Updated 2017-07-29 · CVE-2007-2814

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Pegasus ImagN' ActiveX control (IMW32O40.OCX) version 4.00.041

Description The issue is related to multiple stack-based buffer overflows that allow remote attackers to execute arbitrary code. This can be achieved via a long FileName parameter or through various functions such as BeginReport, CreatePictureExA, DefineImage, DefineImageEx, DefineImageFox, CopyBufToClipExA, LoadEx, and LoadFox.

Recommendations For Pegasus ImagN' ActiveX control (IMW32O40.OCX) version 4.00.041, consider disabling the affected functions until a patch is available. Restrict access to the FileName parameter to minimize the risk of exploitation. Avoid using the BeginReport, CreatePictureExA, DefineImage, DefineImageEx, DefineImageFox, CopyBufToClipExA, LoadEx, and LoadFox functions in the affected ActiveX control until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2007-2814

Affected Products

Pegasus Imagn' Activex Control

References · 8

• 🔥 http://securityfocus.com/bid/24086 · Exploit
• 🔥 https://exploit-db.com/exploits/3966 · Exploit
• http://secunia.com/advisories/25351 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2814 · Security Note
• http://vupen.com/english/advisories/2007/1899 · Note
• http://retrogod.altervista.org/IE_pegasus_imagn_bof.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34419 · Note
• http://osvdb.org/36518 · Note