CVE-2007-2919

Multiple stack-based buffer overflows in the FViewerLoading ActiveX control (FlipViewerX.dll) in E-Book Systems FlipViewer before 4.1 allow remote attackers to cause a denial of service (crash) or execute arbitrary code via long (1) UID, (2) Opf, (3) PAGENO, (4) LaunchMode, (5) SubID, (6) BookID, (7) LibraryID, (8) SubURL, and (9) LoadOpf properties.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

33.72% chance of exploitation in the next 30 days, 98th percentile

Published

2007-06-06

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ebook_flipviewer…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/16601

References

• CVE Record
• NVD entry

Related

• CVE-2007-2918
• CVE-2007-2926
• CVE-2007-2916
• CVE-2007-2930
• CVE-2007-2908
• CVE-2007-2931