CVE-2007-4470 Multiple stack-based buffer overflows in the Earth Resource Mapping NCSView ActiveX control before 3.4.0.242 in NCSView.dll, as distributed in ER Mapper ECW JPEG 2000 Plug-in before 8.1, allow remote....
HighCVSS 9.3
EPSS 6.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in the Earth Resource Mapping NCSView ActiveX control before 3.4.0.242 in NCSView.dll, as distributed in ER Mapper ECW JPEG 2000 Plug-in before 8.1, allow remote attackers to execute arbitrary code via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| er mapper image web server ecw jpeg 2000 plug-in | <= 8 | No fix listed |
References
- 37780 vdb-entry
- 26729 third-party-advisory vendor-advisory
- VU#589188 patch third-party-advisory us-government-resource
- 25584 vdb-entry
- ADV-2007-3093 vdb-entry
- earthresource-ncsview-bo(36497) vdb-entry