CVE-2007-4336 Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 (DirectTransform FlashPix) ActiveX control in DXTLIPI.DLL 6.0.2.827, as packaged in Microsoft DirectX Media 6.0 SDK, al...
MediumCVSS 4.3
EPSS 50.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 (DirectTransform FlashPix) ActiveX control in DXTLIPI.DLL 6.0.2.827, as packaged in Microsoft DirectX Media 6.0 SDK, allows remote attackers to execute arbitrary code via a long SourceUrl property value.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft directx media | = 6.0 | No fix listed |
References
- 36399 vdb-entry
- 26426 third-party-advisory vendor-advisory
- VU#466601 third-party-advisory us-government-resource
- 25279 vdb-entry
- 1018551 vdb-entry
- ADV-2007-2857 vdb-entry
- directx-dxtlipi-bo(35970) vdb-entry
- 4279 exploit