CVE-2007-2496 The WordOCX ActiveX control in WordViewer.ocx 3.2.0.5 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) DoOleCommand, (2) FTPDownloadFile, (3) FTPUploadFi...
HighCVSS 7.8
EPSS 3.8%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The WordOCX ActiveX control in WordViewer.ocx 3.2.0.5 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) DoOleCommand, (2) FTPDownloadFile, (3) FTPUploadFile, (4) HttpUploadFile, (5) GotoPage, (6) Save, (7) SaveWebFile, (8) HttpDownloadFile, (9) Open, (10) OpenWebFile, (11) SaveAs, or (12) ShowWordStandardDialog property value.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| office ocx word viewer ocx | = 3.2.0.5 | No fix listed |
References
- moaxb.blogspot.com
- 34334 vdb-entry
- 25100 third-party-advisory
- 23784 vdb-entry
- ADV-2007-1634 vdb-entry
- word-viewer-ocx-bo(34027) vdb-entry