CVE-2007-0111

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-01-09 · updated 2026-06-16

Description

Buffer overflow in Resco Photo Viewer for PocketPC 4.11 and 6.01, as used in mobile devices running Windows Mobile 5.0, 2003, and 2003SE, allows remote attackers to execute arbitrary code via a crafted PNG image.

Affected products

Resco Photo Viewer: 4.11, 6.11

References

http://blog.trendmicro.com/flaw-in-3rd-party-app-weakens-windows-mobile/
http://osvdb.org/32644
http://secunia.com/advisories/23658
http://www.securityfocus.com/bid/21920
http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+Resco+Photo+Viewer+6.01+Enabling+Code+Injection+and+Arbitrary+Code+Execution
http://www.vupen.com/english/advisories/2007/0072
http://blog.trendmicro.com/flaw-in-3rd-party-app-weakens-windows-mobile/
http://osvdb.org/32644
http://secunia.com/advisories/23658
http://www.securityfocus.com/bid/21920
http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+Resco+Photo+Viewer+6.01+Enabling+Code+Injection+and+Arbitrary+Code+Execution
http://www.vupen.com/english/advisories/2007/0072

Get alerted when CVE-2007-0111 or the next vulnerability affects your stack