CVE-2007-2209: Buffer Overflow

Published Apr 24, 2007

Updated

Buffer overflow in igcore15d.dll 15.1.2.0 and 15.2.0.0 for AccuSoft ImageGear, as used in Corel Paint Shop Pro Photo 11.20 and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted .CLP file. NOTE: some details were obtained from third party sources.

Affected Software

2 affected components

Accusoft ImageGear

Corel Paint Shop Pro=11.20

Event History

Apr 24, 2007

CVE Published

08:19 PM

Apr 25, 2007

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-2209?

CVE-2007-2209 has been classified as a high-severity vulnerability due to its potential to allow remote code execution.

How do I fix CVE-2007-2209?

To fix CVE-2007-2209, update to the latest version of AccuSoft ImageGear or Corel Paint Shop Pro that addresses this vulnerability.

What products are affected by CVE-2007-2209?

CVE-2007-2209 affects AccuSoft ImageGear versions 15.1.2.0 and 15.2.0.0, as well as Corel Paint Shop Pro version 11.20.

What type of attack is enabled by CVE-2007-2209?

CVE-2007-2209 allows user-assisted remote attackers to execute arbitrary code by exploiting a buffer overflow through crafted .CLP files.

Is CVE-2007-2209 exploitable without user interaction?

CVE-2007-2209 requires user interaction, as an attacker must convince the user to open a malicious .CLP file.