CVE-2007-2588

Office Viewer OCX 3.2 - Buffer Overflow

Title source: llm

Description

Multiple buffer overflows in the Office Viewer OCX ActiveX control (oa.ocx) 3.2 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long argument to the (1) HttpDownloadFile, (2) Open, (3) OpenWebFile, (4) DoOleCommand, (5) FTPDownloadFile, (6) FTPUploadFile, (7) HttpUploadFile, (8) Save, or (9) SaveWebFile function.

Exploits (1)

exploitdb WORKING POC VERIFIED

by shinnai · htmldoswindows

https://www.exploit-db.com/exploits/3845

View Code ZIP pw:eip

References (7)

[Vendor Advisory] http://secunia.com/advisories/25143

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/1664

[Various Sources] http://moaxb.blogspot.com/2007/05/moaxb-04-office-viewer-oaocx-v-32.html

[Various Sources] http://www.shinnai.altervista.org/moaxb/20070504/oa.txt

[Third Party Advisory, VDB Entry] http://osvdb.org/34335

[Exploit] http://www.securityfocus.com/bid/23811

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/34067

Scores

EPSS 0.0677

EPSS Percentile 91.3%

Details

Status published

Products (1)

office_ocx/office_viewer_ocx 3.2

Published May 10, 2007

Tracked Since Feb 18, 2026