CVE-2007-3169 Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions before 5.0, allows remote attackers to cause a denial of service....
HighCVSS 9.3
EPSS 11.9%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions before 5.0, allows remote attackers to cause a denial of service (Internet Explorer 7 crash) or execute arbitrary code via a long first argument to the HttpDownloadFile method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| edraw office viewer component | <= 5.0 | No fix listed |
| edraw office viewer component | = 4.0.5.20 | No fix listed |
References
- moaxb.blogspot.com
- 36045 vdb-entry
- 25418 third-party-advisory vendor-advisory
- shinnai.altervista.org
- www.ocxt.com
- 24229 exploit vdb-entry
- ADV-2007-1992 vdb-entry
- edraw-viewer-httpdownloadfile-bo(34590) vdb-entry
- 4009 exploit