CVE-2007-1688

Description

Buffer overflow in the PhPInfo ActiveX control in PhPCtrl.dll in Callisto PhotoParade Player allows remote attackers to execute arbitrary code via the FileVersionof property.

Affected products

• callisto / photoparade_player

References

• MISChttp://www.securityfocus.com/bid/25654
• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2007/3138
• VENDOR_ADVISORYhttp://secunia.com/advisories/26789
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/36588
• MISChttp://www.kb.cert.org/vuls/id/171449
• MISChttp://osvdb.org/37731