CVE-2007-2588

Multiple buffer overflows in the Office Viewer OCX ActiveX control (oa.ocx) 3.2 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long argument to the (1) HttpDownloadFile, (2) Open, (3) OpenWebFile, (4) DoOleCommand, (5) FTPDownloadFile, (6) FTPUploadFile, (7) HttpUploadFile, (8) Save, or (9) SaveWebFile function.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

7.04% chance of exploitation in the next 30 days, 94th percentile

Published

2007-05-09

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/3845

References

• CVE Record
• NVD entry

Related

• CVE-2007-2586
• CVE-2007-2594
• CVE-2007-2585
• CVE-2007-2596
• CVE-2007-2584
• CVE-2007-2597