CVE-2007-4472

CriticalCVSS 9.3/10Last modified Jun 16, 2026

Description

Multiple buffer overflows in the Broderbund Expressit 3DGreetings Player ActiveX control could allow remote attackers to execute arbitrary code via unspecified vectors.

Metrics

CVSS 2.0 9.3/10AV:N/AC:M/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/37779
http://secunia.com/advisories/26717Vendor Advisory
http://www.kb.cert.org/vuls/id/574401Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/25564
http://www.vupen.com/english/advisories/2007/3074
https://exchange.xforce.ibmcloud.com/vulnerabilities/36472
http://osvdb.org/37779
http://secunia.com/advisories/26717Vendor Advisory
http://www.kb.cert.org/vuls/id/574401Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/25564
http://www.vupen.com/english/advisories/2007/3074
https://exchange.xforce.ibmcloud.com/vulnerabilities/36472

Timeline

Published: Sep 6, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007

CVE-2007-447310.0Gesytec Easylon OPC Server before 2.3.44 does not properly validate server handles, which allows remote attackers to execute arbitrary code CVE-2007-44749.3Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll CVE-2007-44759.3Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote at CVE-2007-44767.5Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."CVE-2007-44775.0The administration interface in the Planet VC-200M VDSL2 router allows remote attackers to cause a denial of service (administration interfa CVE-2007-44784.3Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6.0 and 7 allows user-assisted remote attackers to inject arbitrary CVE-2007-44794.3Cross-site scripting (XSS) vulnerability in search.html in Search Engine Builder allows remote attackers to inject arbitrary web script or H CVE-2007-44804.3Cross-site scripting (XSS) vulnerability in index.php in the Sirius 1.0 theme for WordPress allows remote attackers to inject arbitrary web CVE-2007-44814.3Cross-site scripting (XSS) vulnerability in index.php in the (1) Blix 0.9.1 and (2) Blix 0.9.1 Rus themes for WordPress allows remote attack CVE-2007-44824.3Cross-site scripting (XSS) vulnerability in index.php in the Pool 1.0.7 theme for WordPress allows remote attackers to inject arbitrary web CVE-2007-44834.3Cross-site scripting (XSS) vulnerability in index.php in the WordPress Classic 1.5 theme in WordPress before 2.1.3 allows remote attackers t CVE-2007-44847.5PHP remote file inclusion vulnerability in login.php in My_REFERER 1.08 allows remote attackers to execute arbitrary PHP code via a URL in t