CVE-2007-4470

Critical

Description

Multiple stack-based buffer overflows in the Earth Resource Mapping NCSView ActiveX control before 3.4.0.242 in NCSView.dll, as distributed in ER Mapper ECW JPEG 2000 Plug-in before 8.1, allow remote attackers to execute arbitrary code via unspecified vectors.

SeverityCritical
CVSS9.3
Exploit probability—
ProductEr Mapper Image Web Server Ecw Jpeg 2000 Plug-in
PublishedSep 10, 2007
First seenSep 10, 2007

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
er_mapper image_web_server_ecw_jpeg_2000_plug-inv ≤ 8—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2007-4470 · Er Mapper Image Web Server Ecw Jpeg 2000 Plug-in · Dark Radar