CVE-2007-4466

MediumCVSS 6.8/10Last modified Jun 16, 2026

Description

Multiple stack-based buffer overflows in Electronic Arts (EA) SnoopyCtrl ActiveX control (NPSnpy.dll) allow remote attackers to execute arbitrary code via unspecified methods and parameters.

Metrics

CVSS 2.0 6.8/10AV:N/AC:M/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-94 CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/37723
http://secunia.com/advisories/27143Vendor Advisory
http://www.kb.cert.org/vuls/id/179281US Government Resource
http://www.securityfocus.com/bid/25970
http://www.vupen.com/english/advisories/2007/3415
https://exchange.xforce.ibmcloud.com/vulnerabilities/37020
http://osvdb.org/37723
http://secunia.com/advisories/27143Vendor Advisory
http://www.kb.cert.org/vuls/id/179281US Government Resource
http://www.securityfocus.com/bid/25970
http://www.vupen.com/english/advisories/2007/3415
https://exchange.xforce.ibmcloud.com/vulnerabilities/37020

Timeline

Published: Oct 9, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007

CVE-2007-44679.3Multiple stack-based buffer overflows in the Oracle JInitiator ActiveX control (beans.ocx) 1.1.8.16 and earlier, as used by Oracle Forms app CVE-2007-44709.3Multiple stack-based buffer overflows in the Earth Resource Mapping NCSView ActiveX control before 3.4.0.242 in NCSView.dll, as distributed CVE-2007-44719.3Multiple unspecified vulnerabilities in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to create or o CVE-2007-44729.3Multiple buffer overflows in the Broderbund Expressit 3DGreetings Player ActiveX control could allow remote attackers to execute arbitrary c CVE-2007-447310.0Gesytec Easylon OPC Server before 2.3.44 does not properly validate server handles, which allows remote attackers to execute arbitrary code CVE-2007-44749.3Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll CVE-2007-44759.3Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote at CVE-2007-44767.5Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."CVE-2007-44775.0The administration interface in the Planet VC-200M VDSL2 router allows remote attackers to cause a denial of service (administration interfa CVE-2007-44784.3Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6.0 and 7 allows user-assisted remote attackers to inject arbitrary CVE-2007-44794.3Cross-site scripting (XSS) vulnerability in search.html in Search Engine Builder allows remote attackers to inject arbitrary web script or H CVE-2007-44804.3Cross-site scripting (XSS) vulnerability in index.php in the Sirius 1.0 theme for WordPress allows remote attackers to inject arbitrary web