VULNERABILITY INTELLIGENCE

CVE-2007-4336

CVSS score4.3 MEDIUM
EPSS probability50.71%
CISA KEVNot currently listed
Published2007-08-14
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:N/A:P

Description

Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 (DirectTransform FlashPix) ActiveX control in DXTLIPI.DLL 6.0.2.827, as packaged in Microsoft DirectX Media 6.0 SDK, allows remote attackers to execute arbitrary code via a long SourceUrl property value.

Primary references