CVE-2007-2244
Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow...
Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) BMP, (2) DIB, or (3) RLE file.
Exploit likelihood
What each source reports
NVD Score used
9.3
Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) BMP, (2) DIB, or (3) RLE file.
- Record
CVE-2007-2244- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) BMP, (2) DIB, or (3) RLE file.
- Record
CVE-2007-2244- Updated
- 2026-11-02
EUVDEUVD-2007-2239 No score
Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) BMP, (2) DIB, or (3) RLE file.
- Record
EUVD-2007-2239- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hmwf-46rq-28cj No score
Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow...
Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) BMP, (2) DIB, or (3) RLE file.
- Record
GHSA-hmwf-46rq-28cj- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Adobe Photoshop CS2 / CS3 - '.bmp' Local Buffer Overflow | 2007-04-24 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2244 is a high vulnerability (CVSS 9.3) in Adobe Golive, published April 25, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 31.7%, the 98th percentile. No source names a fixed version.
References
securityfocus.com/bid/23621
securitytracker.com/id?1018792
osvdb.org/35370
secunia.com/advisories/25023
exchange.xforce.ibmcloud.com/vulnerabilities/33838
vupen.com/english/advisories/2007/3442
Show 14 moreShow less
exploit-db.com/exploits/3793
osvdb.org/38065
osvdb.org/38064
secunia.com/advisories/26864
secunia.com/advisories/26846
vupen.com/english/advisories/2007/1523
adobe.com/support/security/bulletins/apsb07-17.html
osvdb.org/38066
adobe.com/support/security/bulletins/apsb07-13.html
vupen.com/english/advisories/2007/3443
adobe.com/support/security/bulletins/apsb07-16.html
securitytracker.com/id?1017962
nvd.nist.gov/vuln/detail/CVE-2007-2244
github.com/advisories/GHSA-hmwf-46rq-28cj