CVE-2007-2366 : Buffer overflow in Corel Paint Shop Pro 11.20 allows user-assisted remote attackers to execute arbitrary code via a craf

Buffer overflow in Corel Paint Shop Pro 11.20 allows user-assisted remote attackers to execute arbitrary code via a crafted .PNG file.

Published 2007-04-30 22:19:00

Updated 2017-10-11 01:32:12

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowExecute code

Exploit prediction scoring system (EPSS) score for CVE-2007-2366

EPSS FAQ

91.49%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 99 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-2366

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.4	HIGH	AV:A/AC:M/Au:S/C:C/I:C/A:C	4.4	10.0	NIST
Access Vector: Adjacent Network Access Complexity: Medium Authentication: Single Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

Products affected by CVE-2007-2366

Corel » Paint Shop Pro » Version: 11.20
cpe:2.3:a:corel:paint_shop_pro:11.20:*:*:*:*:*:*:*
Matching versions