CVE-2007-2588

EPSS 7.0%

Multiple buffer overflows in the Office Viewer OCX ActiveX control (oa.ocx) 3.2 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long argument to the (1) HttpDownloadFile, (2) Open, (3) OpenWebFile, (4) DoOleCommand, (5) FTPDownloadFile, (6) FTPUploadFile, (7) HttpUploadFile, (8) Save, or (9) SaveWebFile function.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/3845unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://moaxb.blogspot.com/2007/05/moaxb-04-office-viewer-oaocx-v-32.html http://osvdb.org/34335 http://secunia.com/advisories/25143 https://exchange.xforce.ibmcloud.com/vulnerabilities/34067 http://www.securityfocus.com/bid/23811 http://www.shinnai.altervista.org/moaxb/20070504/oa.txt http://www.vupen.com/english/advisories/2007/1664