CVE-2007-2787

Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL...

7.5 HighPublic exploit

CVE-2007-2787 is a high vulnerability (CVSS 7.5) in Lead Technologies Leadtools Raster Thumbnail Object Library, published May 21, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.50%, the 94th percentile. No source names a fixed version.

Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL ActiveX control in LeadTools Raster Thumbnail Object Library 14.5.0.44 allows remote attackers to execute arbitrary code via a long argument.

Exploit likelihood

7.50%Down 35.4 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2007-2787
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2007-2787
Updated: 2026-11-02

EUVDEUVD-2007-2779 No score

Record: EUVD-2007-2779
Updated: 2026-11-03

GitHub AdvisoriesGHSA-348j-4g33-25p9 No score

Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL...

Record: GHSA-348j-4g33-25p9
Updated: 2026-11-02

Affected products

lead technologies leadtools raster thumbnail object library

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	LeadTools Thumbnail Browser Control - 'lttmb14E.ocx' Remote Buffer Overflow	2007-05-18
Exploit-DB	LeadTools Raster Thumbnail Object Library - 'LTRTM14e.dll' Remote Buffer Overflow	2007-05-18

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	aliases, exploits, facts, references, title	Exploit-DB, GitHub Advisories
2026-11-02	created	CVE List, NVD

References

Show 10 moreShow less