PT-2007-4221 · Corel / Micrografx · Corel / Micrografx Activecgm Browser Activex Control

Published 2007-06-14 · Updated 2017-07-29 · CVE-2007-2921

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Corel / Micrografx ActiveCGM Browser ActiveX control versions prior to 7.1.4.19

Description The issue is related to multiple buffer overflows in the acgm.dll component of the Corel / Micrografx ActiveCGM Browser ActiveX control. This allows remote attackers to execute arbitrary code via unspecified vectors.

Recommendations For versions prior to 7.1.4.19, update to version 7.1.4.19 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-2921

Affected Products

Corel / Micrografx Activecgm Browser Activex Control

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-2921 · Security Note
• http://kb.cert.org/vuls/id/983249 · Patch
• http://secunia.com/advisories/25672 · Vendor Advisory
• http://securityfocus.com/bid/24464 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34863 · Note
• http://nessus.org/plugins/index.php?view=single&id=25494 · Note
• http://vupen.com/english/advisories/2007/2191 · Note
• http://osvdb.org/35468 · Note