CVE-2007-4336

Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 (DirectTransform FlashPix) ActiveX control in DXTLIPI.DLL 6.0.2.827, as packaged in Microsoft DirectX Media 6.0 SDK, allows remote attackers to execute arbitrary code via a long SourceUrl property value.

• http://osvdb.org/36399
• http://secunia.com/advisories/26426Vendor Advisory
• http://www.kb.cert.org/vuls/id/466601US Government Resource
• http://www.securityfocus.com/bid/25279
• http://www.securitytracker.com/id?1018551
• http://www.vupen.com/english/advisories/2007/2857
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35970
• https://www.exploit-db.com/exploits/4279
• http://osvdb.org/36399
• http://secunia.com/advisories/26426Vendor Advisory
• http://www.kb.cert.org/vuls/id/466601US Government Resource
• http://www.securityfocus.com/bid/25279
• http://www.securitytracker.com/id?1018551
• http://www.vupen.com/english/advisories/2007/2857
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35970
• https://www.exploit-db.com/exploits/4279

Published

Aug 14, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-4330PHP remote file inclusion vulnerability in shoutbox.php in S…
• CVE-2007-4331PHP remote file inclusion vulnerability in index.php in Find…
• CVE-2007-4332SQL injection vulnerability in article.php in Article Dashbo…
• CVE-2007-4333Multiple cross-site scripting (XSS) vulnerabilities in signu…
• CVE-2007-4334Cross-site scripting (XSS) vulnerability in whois.php in Php…
• CVE-2007-4335Format string vulnerability in the SMTP server component in …
• CVE-2007-4337Multiple buffer overflows in the httplib_parse_sc_header fun…
• CVE-2007-4338index.php in Ryan Haudenschilt Family Connections (FCMS) bef…
• CVE-2007-4339Multiple PHP remote file inclusion vulnerabilities in PHPCen…
• CVE-2007-4340PHP remote file inclusion vulnerability in index.php in phpD…
• CVE-2007-4341PHP remote file inclusion vulnerability in adm/my_statistics…
• CVE-2007-4342PHP remote file inclusion vulnerability in include.php in PH…