CVE-2007-2814
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 5.5%
from disclosure to weapon0 days
Published on NVDMay 22
1st PoCMay 21
exploitation probability
5.5%top 8% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Multiple stack-based buffer overflows in the Pegasus ImagN' ActiveX control (IMW32O40.OCX) 4.00.041 allow remote attackers to execute arbitrary code via (1) a long FileName parameter, or unspecified vectors involving the (2) BeginReport, (3) CreatePictureExA, (4) DefineImage, (5) DefineImageEx, (6) DefineImageFox, (7) CopyBufToClipExA, (8) LoadEx, (9) LoadFox, and other functions.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/3966⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.