{"api_version":"1","generated_at":"2026-07-23T09:36:05+00:00","cve":"CVE-2007-0111","urls":{"html":"https://cve.report/CVE-2007-0111","api":"https://cve.report/api/cve/CVE-2007-0111.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-0111","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-0111"},"summary":{"title":"CVE-2007-0111","description":"Buffer overflow in Resco Photo Viewer for PocketPC 4.11 and 6.01, as used in mobile devices running Windows Mobile 5.0, 2003, and 2003SE, allows remote attackers to execute arbitrary code via a crafted PNG image.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-01-09 00:28:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securityfocus.com/bid/21920","name":"http://www.securityfocus.com/bid/21920","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Resco Photo Viewer for PocketPC Malformed PNG File Remote Code Execution Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://blog.trendmicro.com/flaw-in-3rd-party-app-weakens-windows-mobile/","name":"http://blog.trendmicro.com/flaw-in-3rd-party-app-weakens-windows-mobile/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Flaw in 3rd-party App Weakens Windows Mobile | TrendLabs | Malware Blog - by Trend Micro","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://osvdb.org/32644","name":"http://osvdb.org/32644","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://secunia.com/advisories/23658","name":"http://secunia.com/advisories/23658","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Resco Photo Viewer PNG Handling Unspecified Vulnerability - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+Resco+Photo+Viewer+6.01+Enabling+Code+Injection+and+Arbitrary+Code+Execution","name":"http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+Resco+Photo+Viewer+6.01+Enabling+Code+Injection+and+Arbitrary+Code+Execution","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Vulnerability in Resco Photo Viewer 6.01 Enabling Code Injection and Arbitrary Code Execution","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/0072","name":"http://www.vupen.com/english/advisories/2007/0072","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+Resco+Photo+Viewer+6%2E01+Enabling+Code+Injection+and+Arbitrary+Code+Execution","name":"MISC:http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+Resco+Photo+Viewer+6%2E01+Enabling+Code+Injection+and+Arbitrary+Code+Execution","refsource":"MITRE","tags":[],"title":"Vulnerability in Resco Photo Viewer 6.01 Enabling Code Injection and Arbitrary Code Execution","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-0111","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-0111","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"111","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"resco","cpe5":"photo_viewer","cpe6":"4.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"111","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"resco","cpe5":"photo_viewer","cpe6":"6.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T12:03:37.065Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"ADV-2007-0072","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/0072"},{"name":"32644","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/32644"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://blog.trendmicro.com/flaw-in-3rd-party-app-weakens-windows-mobile/"},{"name":"23658","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/23658"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+Resco+Photo+Viewer+6.01+Enabling+Code+Injection+and+Arbitrary+Code+Execution"},{"name":"21920","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/21920"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-01-08T00:00:00.000Z","descriptions":[{"lang":"en","value":"Buffer overflow in Resco Photo Viewer for PocketPC 4.11 and 6.01, as used in mobile devices running Windows Mobile 5.0, 2003, and 2003SE, allows remote attackers to execute arbitrary code via a crafted PNG image."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2008-11-15T10:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"ADV-2007-0072","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/0072"},{"name":"32644","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/32644"},{"tags":["x_refsource_MISC"],"url":"http://blog.trendmicro.com/flaw-in-3rd-party-app-weakens-windows-mobile/"},{"name":"23658","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/23658"},{"tags":["x_refsource_MISC"],"url":"http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+Resco+Photo+Viewer+6.01+Enabling+Code+Injection+and+Arbitrary+Code+Execution"},{"name":"21920","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/21920"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-0111","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Buffer overflow in Resco Photo Viewer for PocketPC 4.11 and 6.01, as used in mobile devices running Windows Mobile 5.0, 2003, and 2003SE, allows remote attackers to execute arbitrary code via a crafted PNG image."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"ADV-2007-0072","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/0072"},{"name":"32644","refsource":"OSVDB","url":"http://osvdb.org/32644"},{"name":"http://blog.trendmicro.com/flaw-in-3rd-party-app-weakens-windows-mobile/","refsource":"MISC","url":"http://blog.trendmicro.com/flaw-in-3rd-party-app-weakens-windows-mobile/"},{"name":"23658","refsource":"SECUNIA","url":"http://secunia.com/advisories/23658"},{"name":"http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+Resco+Photo+Viewer+6%2E01+Enabling+Code+Injection+and+Arbitrary+Code+Execution","refsource":"MISC","url":"http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+Resco+Photo+Viewer+6%2E01+Enabling+Code+Injection+and+Arbitrary+Code+Execution"},{"name":"21920","refsource":"BID","url":"http://www.securityfocus.com/bid/21920"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-0111","datePublished":"2007-01-09T00:00:00.000Z","dateReserved":"2007-01-08T00:00:00.000Z","dateUpdated":"2024-08-07T12:03:37.065Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-01-09 00:28:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:resco:photo_viewer:4.11:*:*:*:*:*:*:*","matchCriteriaId":"81C552AF-6018-4A11-BDFE-4F632F3E2C64"},{"vulnerable":true,"criteria":"cpe:2.3:a:resco:photo_viewer:6.11:*:*:*:*:*:*:*","matchCriteriaId":"2AC3A83A-7D25-4F47-954F-FDAFDC1EF66A"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"111","Ordinal":"1","Title":"CVE-2007-0111","CVE":"CVE-2007-0111","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"111","Ordinal":"1","NoteData":"Buffer overflow in Resco Photo Viewer for PocketPC 4.11 and 6.01, as used in mobile devices running Windows Mobile 5.0, 2003, and 2003SE, allows remote attackers to execute arbitrary code via a crafted PNG image.","Type":"Description","Title":"CVE-2007-0111"},{"CveYear":"2007","CveId":"111","Ordinal":"2","NoteData":"2007-01-08","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"111","Ordinal":"3","NoteData":"2008-11-15","Type":"Other","Title":"Modified"}]}}}