CVE-2007-2588

Multiple buffer overflows in the Office Viewer OCX ActiveX control (oa.ocx) 3.2 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long argument to the (1) HttpDownloadFile, (2) Open, (3) OpenWebFile, (4) DoOleCommand, (5) FTPDownloadFile, (6) FTPUploadFile, (7) HttpUploadFile, (8) Save, or (9) SaveWebFile function.

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2007-05-10

Last modified

2024-08-07

Affected products

• Office Viewer Ocx (Office Ocx)

References

• http://moaxb.blogspot.com/2007/05/moaxb-04-office-viewer-oaocx-v-32.html
• http://osvdb.org/34335
• http://secunia.com/advisories/25143
• http://www.securityfocus.com/bid/23811
• http://www.shinnai.altervista.org/moaxb/20070504/oa.txt
• http://www.vupen.com/english/advisories/2007/1664
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34067