Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-2494. PoCs published by shinnai.
AI-analyzed exploit summary This exploit demonstrates a Denial of Service (DoS) vulnerability in PowerPointViewer.ocx v3.1.0.3 by passing excessively long strings to multiple methods, causing the application to crash.
Description
Multiple stack-based buffer overflows in the PowerPointOCX ActiveX control in PowerPointViewer.ocx 3.1.0.3 allow remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) DoOleCommand, (2) FTPDownloadFile, (3) FTPUploadFile, (4) HttpUploadFile, (5) Save, (6) SaveWebFile, (7) HttpDownloadFile, (8) Open, or (9) OpenWebFile property value. NOTE: some of these details are obtained from third party information.
Exploits (1)
This exploit demonstrates a Denial of Service (DoS) vulnerability in PowerPointViewer.ocx v3.1.0.3 by passing excessively long strings to multiple methods, causing the application to crash.