CVE-2007-2814: Pegasus Imagn Activex Control

High severity, CVSS 7.5. EPSS: 5.5% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in the Pegasus ImagN' ActiveX control (IMW32O40.OCX) 4.00.041 allow remote attackers to execute arbitrary code via (1) a long FileName parameter, or unspecified vectors involving the (2) BeginReport, (3) CreatePictureExA, (4) DefineImage, (5) DefineImageEx, (6) DefineImageFox, (7) CopyBufToClipExA, (8) LoadEx, (9) LoadFox, and other functions.

Affected products

• Pegasus Imagn Activex Control: version 4.00.041 only

Published 2007-05-22. Last modified 2026-06-16.