Unscored severity · published Apr 24, 2007
CVE-2007-2209
Buffer overflow in igcore15d.dll 15.1.2.0 and 15.2.0.0 for AccuSoft ImageGear, as used in Corel Paint Shop Pro Photo 11.20 and possibly other products, allows user-assisted remote…
–
CVSS
11.6%
EPSS
No
On KEV
Description
Buffer overflow in igcore15d.dll 15.1.2.0 and 15.2.0.0 for AccuSoft ImageGear, as used in Corel Paint Shop Pro Photo 11.20 and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted .CLP file. NOTE: some details were obtained from third party sources.
Exploitation
Is it being used?
Exploit prediction (EPSS)11.6% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IM
Imagegear · Accusoft
All versions, or not specified · source: NVD
PS
Paint Shop Pro · Corel
11.20 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2209
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2209
osvdb.org
http://osvdb.org/35308
osvdb.org
http://osvdb.org/35386
Vendor Advisory
http://secunia.com/advisories/25016
Vendor Advisory
http://secunia.com/advisories/25050
www.securityfocus.com
http://www.securityfocus.com/bid/23604
www.securitytracker.com
http://www.securitytracker.com/id?1017963
More from Imagegear
9.8
CVE-2023-32614
A heap-based buffer overflow vulnerability exists in the create_png_object functionality of Accusoft ImageGear 20.1
9.8
CVE-2023-32284
An out-of-bounds write vulnerability exists in the tiff_planar_adobe functionality of Accusoft ImageGear 20.1
9.8
CVE-2023-35002
A heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1
9.8
CVE-2023-39453
A use-after-free vulnerability exists in the tif_parse_sub_IFD functionality of Accusoft ImageGear 20.1
9.8
CVE-2023-40163
An out-of-bounds write vulnerability exists in the allocate_buffer_for_jpeg_decoding functionality of Accusoft ImageGear 20.1