CVE-2007-2980

Lead Technologies Leadtools Raster Image SDK - Memory Corruption

Title source: rule

Description

Heap-based buffer overflow in a certain ActiveX control in LEADTOOLS LEAD Raster ISIS Object (LTRIS14e.DLL) 14.5.0.44 allows remote attackers to cause a denial of service (Internet Explorer crash) or execute arbitrary code via a long DriverName property, a different ActiveX control than CVE-2007-2827.

Exploits (1)

exploitdb WORKING POC VERIFIED

by shinnai · htmldoswindows

https://www.exploit-db.com/exploits/4011

View Code ZIP pw:eip

References (7)

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/34528

[Vendor Advisory] http://secunia.com/advisories/25433

[Third Party Advisory, VDB Entry] http://osvdb.org/36043

[Various Sources] http://moaxb.blogspot.com/2007/05/moaxb-27-leadtools-raster-isis-object.html

[Vendor Advisory] http://www.vupen.com/english/advisories/2007/1972

[Various Sources] http://www.shinnai.altervista.org/moaxb/20070527/leadrasterisistxt.html

[Exploit] http://www.securityfocus.com/bid/24193

Scores

EPSS 0.0900

EPSS Percentile 92.6%

Details

CWE

CWE-119

Status published

Products (2)

lead_technologies/leadtools_raster_image_sdk 14.5

lead_technologies/leadtools_raster_isis_object 14.5.0.44

Published Jun 01, 2007

Tracked Since Feb 18, 2026