CVE-2007-2055

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.23%

Published

Apr 30, 2007

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

AFFLIB 2.2.8 and earlier allows attackers to execute arbitrary commands via shell metacharacters involving (1) certain command line parameters in tools/afconvert.cpp and (2) arguments to the get_parameter function in aimage/ident.cpp. NOTE: it is unknown if the get_parameter vector (2) is ever called.

Affected Products (1)

afflib · afflibvulnerable

References (10)

http://osvdb.org/35608

http://securityreason.com/securityalert/2656

http://www.securityfocus.com/archive/1/467041/100/0/threaded

http://www.vsecurity.com/bulletins/advisories/2007/afflib-shellinject.txt

https://exchange.xforce.ibmcloud.com/vulnerabilities/33964

http://osvdb.org/35608

http://securityreason.com/securityalert/2656

http://www.securityfocus.com/archive/1/467041/100/0/threaded

http://www.vsecurity.com/bulletins/advisories/2007/afflib-shellinject.txt

https://exchange.xforce.ibmcloud.com/vulnerabilities/33964

KEV Catalog EPSS Scores Vendors All CVEs