CVE-2007-4336

35Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 51%

exploitation probability

51%top 1% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 (DirectTransform FlashPix) ActiveX control in DXTLIPI.DLL 6.0.2.827, as packaged in Microsoft DirectX Media 6.0 SDK, allows remote attackers to execute arbitrary code via a long SourceUrl property value.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4279unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://osvdb.org/36399 http://secunia.com/advisories/26426 https://exchange.xforce.ibmcloud.com/vulnerabilities/35970 https://www.exploit-db.com/exploits/4279 http://www.kb.cert.org/vuls/id/466601 http://www.securityfocus.com/bid/25279 http://www.securitytracker.com/id?1018551 http://www.vupen.com/english/advisories/2007/2857