CVE-2007-2209

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 11.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-04-24 · updated 2026-06-16

Description

Buffer overflow in igcore15d.dll 15.1.2.0 and 15.2.0.0 for AccuSoft ImageGear, as used in Corel Paint Shop Pro Photo 11.20 and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted .CLP file. NOTE: some details were obtained from third party sources.

Affected products

Accusoft ImageGear: all versions
Corel Paint Shop Pro: 11.20

References

http://osvdb.org/35308
http://osvdb.org/35386
http://secunia.com/advisories/25016
http://secunia.com/advisories/25050
http://www.securityfocus.com/bid/23604
http://www.securitytracker.com/id?1017963
http://www.vupen.com/english/advisories/2007/1506
https://exchange.xforce.ibmcloud.com/vulnerabilities/33821
https://www.exploit-db.com/exploits/3779
http://osvdb.org/35308
http://osvdb.org/35386
http://secunia.com/advisories/25016

Get alerted when CVE-2007-2209 or the next vulnerability affects your stack