CVE-2007-2763

Sienzo DMM 2.6.0.4 - Buffer Overflow

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-2763. PoCs published by shinnai.

AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in the LEADTOOLS Multimedia ActiveX control (ltmm15.dll) via the UnlockSupport method. It uses a crafted buffer with a NOP sled and shellcode to execute arbitrary code (calc.exe) in the context of the user.

Description

Buffer overflow in the UnlockSupport function in the LockModules subsystem in a certain ActiveX control in ltmm15.dll in Sienzo Digital Music Mentor (DMM) 2.6.0.4 allows remote attackers to execute arbitrary code via a long string in the second argument, a different issue than CVE-2007-2564.

Exploits (1)

exploitdb WORKING POC VERIFIED

by shinnai · htmlremotewindows

https://www.exploit-db.com/exploits/30049

View Code ZIP pw:eip

This exploit targets a stack-based buffer overflow in the LEADTOOLS Multimedia ActiveX control (ltmm15.dll) via the UnlockSupport method. It uses a crafted buffer with a NOP sled and shellcode to execute arbitrary code (calc.exe) in the context of the user.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: LEADTOOLS Multimedia 15 (ltmm15.dll v. 15.1.0.2)

No auth needed

Prerequisites: Victim must visit a malicious webpage or open a malicious HTML file · LEADTOOLS Multimedia ActiveX control must be installed and accessible

MITRE ATT&CK

T1203 - Exploitation for Client Execution T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →