CVE-2007-2244: adobe golive

CVSS: 9.3v2.0HighModified

Published 25-04-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-2244 is a high (CVSS 9.3) vulnerability in adobe golive. EPSS estimates a 31.71% chance of exploitation in the next 30 days, higher than 98.2% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

31.71%

0%100%

High · -3.87 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits2reference, exploit-database

Timeline

25-04-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) BMP, (2) DIB, or (3) RLE file.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

31.71%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

-3.87 pp

From 35.58% on 18-09-2026

18-09-202618-10-2026

EPSS score

31.71%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaselocalwindowsVerified
Adobe Photoshop CS2 / CS3 - '.bmp' Local Buffer Overflow
Maturity: weaponized

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Affected systems

Adobe3 products

1 vendor · 3 products

References

18 links

www.securityfocus.com/bid/23621VDB EntryX Refsource BIDExploit
securitytracker.com/id?1018792VDB EntryX Refsource SECTRACK
www.osvdb.org/35370VDB EntryX Refsource OSVDB
secunia.com/advisories/25023Third Party AdvisoryX Refsource SECUNIAVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/33838VDB EntryX Refsource XF
www.vupen.com/english/advisories/2007/3442VDB EntryX Refsource VUPENVendor Advisory
www.exploit-db.com/exploits/3793ExploitX Refsource EXPLOIT DB
osvdb.org/38065VDB EntryX Refsource OSVDB
osvdb.org/38064VDB EntryX Refsource OSVDB
secunia.com/advisories/26864Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Show all 18 references

secunia.com/advisories/26846Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2007/1523VDB EntryX Refsource VUPENVendor Advisory
www.adobe.com/support/security/bulletins/apsb07-17.htmlX Refsource CONFIRM
osvdb.org/38066VDB EntryX Refsource OSVDB
www.adobe.com/support/security/bulletins/apsb07-13.htmlX Refsource CONFIRM
www.vupen.com/english/advisories/2007/3443VDB EntryX Refsource VUPENVendor Advisory
www.adobe.com/support/security/bulletins/apsb07-16.htmlX Refsource CONFIRM
www.securitytracker.com/id?1017962VDB EntryX Refsource SECTRACK

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities