CVE-2007-1688

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-09-14 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the PhPInfo ActiveX control in PhPCtrl.dll in Callisto PhotoParade Player allows remote attackers to execute arbitrary code via the FileVersionof property.

Affected products

Callisto Photoparade Player: all versions

References

http://osvdb.org/37731
http://secunia.com/advisories/26789
http://www.kb.cert.org/vuls/id/171449
http://www.securityfocus.com/bid/25654
http://www.vupen.com/english/advisories/2007/3138
https://exchange.xforce.ibmcloud.com/vulnerabilities/36588
http://osvdb.org/37731
http://secunia.com/advisories/26789
http://www.kb.cert.org/vuls/id/171449
http://www.securityfocus.com/bid/25654
http://www.vupen.com/english/advisories/2007/3138
https://exchange.xforce.ibmcloud.com/vulnerabilities/36588

Get alerted when CVE-2007-1688 or the next vulnerability affects your stack