← Vulnerability feed

Vulnerability record · CVE-2007-2209 · published 24 April 2007

CVE-2007-2209: Accusoft imagegear vulnerability

Accusoft · Imagegear

Buffer overflow in igcore15d.dll 15.1.2.0 and 15.2.0.0 for AccuSoft ImageGear, as used in Corel Paint Shop Pro Photo 11.20 and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted .CLP file. NOTE: some details were obtained from third party sources.

6.8 CVSS 2.0 Medium EPSS 12% · top 4.1%
6.8CVSS 2.0 base score
12%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
18References
16 Jun 2026Last modified by NVD

Description

Buffer overflow in igcore15d.dll 15.1.2.0 and 15.2.0.0 for AccuSoft ImageGear, as used in Corel Paint Shop Pro Photo 11.20 and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted .CLP file. NOTE: some details were obtained from third party sources.

AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/35308
http://osvdb.org/35386
http://secunia.com/advisories/25016 Vendor Advisory
http://secunia.com/advisories/25050 Vendor Advisory
http://www.securityfocus.com/bid/23604
http://www.securitytracker.com/id?1017963
http://www.vupen.com/english/advisories/2007/1506
https://exchange.xforce.ibmcloud.com/vulnerabilities/33821
https://www.exploit-db.com/exploits/3779
http://osvdb.org/35308
http://osvdb.org/35386
http://secunia.com/advisories/25016 Vendor Advisory
http://secunia.com/advisories/25050 Vendor Advisory
http://www.securityfocus.com/bid/23604
http://www.securitytracker.com/id?1017963
http://www.vupen.com/english/advisories/2007/1506
https://exchange.xforce.ibmcloud.com/vulnerabilities/33821
https://www.exploit-db.com/exploits/3779

Track CVE-2007-2209 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2023-35002Accusoft imagegear memory buffer overflow vulnerabilityA heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can l…EPSS 1.4%9.8CVE-2023-39453Accusoft imagegear use after free vulnerabilityA use-after-free vulnerability exists in the tif_parse_sub_IFD functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead …EPSS 1.3%9.8CVE-2023-40163Accusoft imagegear out-of-bounds write vulnerabilityAn out-of-bounds write vulnerability exists in the allocate_buffer_for_jpeg_decoding functionality of Accusoft ImageGear 20.1. A specially crafted ma…EPSS 1.1%9.8CVE-2023-32284Accusoft imagegear memory buffer overflow vulnerabilityAn out-of-bounds write vulnerability exists in the tiff_planar_adobe functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can…EPSS 0.88%9.8CVE-2023-32614Accusoft imagegear out-of-bounds write vulnerabilityA heap-based buffer overflow vulnerability exists in the create_png_object functionality of Accusoft ImageGear 20.1. A specially crafted malformed fi…EPSS 0.83%9.8CVE-2022-29465Accusoft imagegear memory buffer overflow vulnerabilityAn out-of-bounds write vulnerability exists in the PSD Header processing memory allocation functionality of Accusoft ImageGear 20.0. A specially-craf…EPSS 2.0%9.8CVE-2021-21821Accusoft imagegear stack-based buffer overflow vulnerabilityA stack-based buffer overflow vulnerability exists in the PDF process_fontname functionality of Accusoft ImageGear 19.9. A specially crafted malforme…EPSS 2.0%9.8CVE-2021-21807Accusoft imagegear integer overflow vulnerabilityAn integer overflow vulnerability exists in the DICOM parse_dicom_meta_info functionality of Accusoft ImageGear 19.9. A specially crafted malformed f…EPSS 1.5%

Source: NIST National Vulnerability Database (record CVE-2007-2209), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.