{"id":"CVE-2007-2787","aliases":["EUVD-2007-2779","GHSA-348j-4g33-25p9"],"status":"published","title":"Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL...","description":"Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL ActiveX control in LeadTools Raster Thumbnail Object Library 14.5.0.44 allows remote attackers to execute arbitrary code via a long argument.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.07503,"percentile":0.9453,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2007-05-21T23:00:00Z","modified":"2026-06-16T22:40:25Z","exploits":[{"source":"exploitdb","id":"EDB-3951","title":"LeadTools Thumbnail Browser Control - 'lttmb14E.ocx' Remote Buffer Overflow","type":"remote","platform":"windows","date":"2007-05-18","verified":true,"url":"https://www.exploit-db.com/exploits/3951"},{"source":"exploitdb","id":"EDB-3952","title":"LeadTools Raster Thumbnail Object Library - 'LTRTM14e.dll' Remote Buffer Overflow","type":"remote","platform":"windows","date":"2007-05-18","verified":true,"url":"https://www.exploit-db.com/exploits/3952"}],"products":[{"vendor":"lead_technologies","product":"leadtools_raster_thumbnail_object_library"}],"references":[{"url":"http://moaxb.blogspot.com/2007/05/moaxb-20-leadtools-raster-thumbnail.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://osvdb.org/36028","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://secunia.com/advisories/25331","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.shinnai.altervista.org/moaxb/20070520/leadrastertxt.html","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"http://www.securityfocus.com/bid/24057","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://moaxb.blogspot.com/2007/05/moaxb-19-leadtools-thumbnail-browser.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.shinnai.altervista.org/moaxb/20070519/lademthumbtxt.html","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34379","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://osvdb.org/36029","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://secunia.com/advisories/25376","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34378","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/bid/24053","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://www.exploit-db.com/exploits/3952","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"https://www.exploit-db.com/exploits/3951","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-2787"},{"url":"https://github.com/advisories/GHSA-348j-4g33-25p9"}],"sources":{"cve":[{"id":"CVE-2007-2787","description":"Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL ActiveX control in LeadTools Raster Thumbnail Object Library 14.5.0.44 allows remote attackers to execute arbitrary code via a long argument.","status":"published","published":"2007-05-21T23:00:00Z","modified":"2024-08-07T13:49:57.513Z","updated_at":"2026-11-02T13:32:34.372976Z"}],"euvd":[{"id":"EUVD-2007-2779","description":"Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL ActiveX control in LeadTools Raster Thumbnail Object Library 14.5.0.44 allows remote attackers to execute arbitrary code via a long argument.","status":"published","published":"2007-05-21T23:00:00Z","modified":"2024-08-07T13:49:57Z","updated_at":"2026-11-03T01:38:19.624156Z"}],"ghsa":[{"id":"GHSA-348j-4g33-25p9","title":"Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL...","description":"Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL ActiveX control in LeadTools Raster Thumbnail Object Library 14.5.0.44 allows remote attackers to execute arbitrary code via a long argument.","status":"published","published":"2022-05-01T18:07:13Z","modified":"2023-01-31T05:03:44Z","updated_at":"2026-11-02T14:48:32.404729Z"}],"nvd":[{"id":"CVE-2007-2787","description":"Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL ActiveX control in LeadTools Raster Thumbnail Object Library 14.5.0.44 allows remote attackers to execute arbitrary code via a long argument.","status":"published","published":"2007-05-21T23:30:00Z","modified":"2026-06-16T22:40:25.47Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:16.479378Z"}]}}