CVE-2007-2771

Stack-based buffer overflow in the LEAD Technologies LeadTools JPEG 2000 LEADJ2K.LEADJ2K.140 ActiveX control (LTJ2K14.ocx) 14.5.0.35 allows remote attackers to execute arbitrary code via a long BitmapDataPath property.

• http://moaxb.blogspot.com/2007/05/moaxb-18-leadtools-jpeg-2000-com.html
• http://osvdb.org/36026
• http://secunia.com/advisories/25313Vendor Advisory
• http://www.kb.cert.org/vuls/id/440112US Government Resource
• http://www.securityfocus.com/bid/24040
• http://www.shinnai.altervista.org/moaxb/20070518/leadtxt.htmlExploit
• http://www.vupen.com/english/advisories/2007/1868
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34367
• http://moaxb.blogspot.com/2007/05/moaxb-18-leadtools-jpeg-2000-com.html
• http://osvdb.org/36026
• http://secunia.com/advisories/25313Vendor Advisory
• http://www.kb.cert.org/vuls/id/440112US Government Resource
• http://www.securityfocus.com/bid/24040
• http://www.shinnai.altervista.org/moaxb/20070518/leadtxt.htmlExploit
• http://www.vupen.com/english/advisories/2007/1868
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34367

Published

May 21, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2765blockhosts.py in BlockHosts before 2.0.3 does not properly p…
• CVE-2007-2766lib/backup-methods.sh in Backup Manager before 0.7.6 provide…
• CVE-2007-2767Unspecified vulnerability in BES before 3.5.0 in OPeNDAP 4 (…
• CVE-2007-2768OpenSSH, when using OPIE (One-Time Passwords in Everything) …
• CVE-2007-2769BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 does not…
• CVE-2007-2770Stack-based buffer overflow in Eudora 7.1 allows user-assist…
• CVE-2007-2772(1) caloggerd.exe (camt70.dll) and (2) mediasvr.exe (catirpc…
• CVE-2007-2773SQL injection vulnerability in plugins/mp3playlist/mp3playli…
• CVE-2007-2774Multiple PHP remote file inclusion vulnerabilities in SunLig…
• CVE-2007-2775AlstraSoft Live Support 1.21 sends a redirect to the web bro…
• CVE-2007-2776AlstraSoft Template Seller Pro 3.25 and earlier sends a redi…
• CVE-2007-2777Unrestricted file upload vulnerability in admin/addsptemplat…