CVE-2007-2919

E-Book Systems FlipViewer < 4.1 - Buffer Overflow

Title source: llm

Description

Multiple stack-based buffer overflows in the FViewerLoading ActiveX control (FlipViewerX.dll) in E-Book Systems FlipViewer before 4.1 allow remote attackers to cause a denial of service (crash) or execute arbitrary code via long (1) UID, (2) Opf, (3) PAGENO, (4) LaunchMode, (5) SubID, (6) BookID, (7) LibraryID, (8) SubURL, and (9) LoadOpf properties.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotewindows

https://www.exploit-db.com/exploits/16601

View Code ZIP pw:eip

metasploit WORKING POC NORMAL

rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ebook_flipviewer_fviewerloading.rb

View Code ZIP pw:eip

References (6)

[Patch, Vendor Advisory] http://secunia.com/advisories/25568

[US Government Resource] http://www.kb.cert.org/vuls/id/449089

[Patch] http://www.securityfocus.com/bid/24328

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/34742

[Third Party Advisory, VDB Entry] http://osvdb.org/37042

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/2081

Scores

EPSS 0.7654

EPSS Percentile 98.9%

Details

Status published

Products (1)

e-book_systems/flipviewer < 4.0

Published Jun 06, 2007

Tracked Since Feb 18, 2026