NetSight
IP …
medium6.8Public exploit code

CVE-2007-2980

Heap-based buffer overflow in a certain ActiveX control in LEADTOOLS LEAD Raster ISIS Object (LTRIS14e.DLL) 14.5.0.44 allows remote attackers to cause a denial…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Heap-based buffer overflow in a certain ActiveX control in LEADTOOLS LEAD Raster ISIS Object (LTRIS14e.DLL) 14.5.0.44 allows remote attackers to cause a denial of service (Internet Explorer crash) or execute arbitrary code via a long DriverName property, a different ActiveX control than CVE-2007-2827.

Affected products

VendorProductAffected versions
Lead TechnologiesLeadtools Raster Image Sdk
Version 14.5
Lead TechnologiesLeadtools Raster Isis Object
Version 14.5.0.44

Weakness classification

CWE-119

References