PT-2007-4155 · Lead Technologies · Leadtools Raster Variant Object Library

Shinnai · Published 2007-05-24 · Updated 2017-10-11 · CVE-2007-2851

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions LeadTools Raster Variant Object Library version 14.5.0.44

Description The issue allows remote attackers to overwrite arbitrary files. This is achieved through the WriteDataToFile method, which is part of the ActiveX control in the LeadTools Raster Variant Object Library.

Recommendations For version 14.5.0.44, consider disabling the WriteDataToFile method as a temporary workaround until a patch is available. Restrict access to the ActiveX control to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2007-2851

Affected Products

Leadtools Raster Variant Object Library

References · 6

• 🔥 http://securityfocus.com/bid/24075 · Exploit
• 🔥 https://exploit-db.com/exploits/3961 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-2851 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34386 · Note
• http://osvdb.org/36033 · Note
• http://moaxb.blogspot.com/2007/05/moaxb-21-leadtools-raster-variant.html · Note