← Voltar para CVEs
CVE-2007-3169
N/ADescricao
Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions before 5.0, allows remote attackers to cause a denial of service (Internet Explorer 7 crash) or execute arbitrary code via a long first argument to the HttpDownloadFile method.
Detalhes CVE
Pontuacao CVSS v3.1N/A
Publicado6/11/2007
Ultima modificacao4/23/2026
Fontenvd
Avistamentos honeypot0
Produtos afetados
edraw:office_viewer_component
Fraquezas (CWE)
CWE-119
Referencias
http://osvdb.org/36045(cve@mitre.org)
http://secunia.com/advisories/25418(cve@mitre.org)
http://shinnai.altervista.org/viewtopic.php?id=42&t_id=32(cve@mitre.org)
http://www.ocxt.com/archives/28(cve@mitre.org)
http://www.securityfocus.com/bid/24229(cve@mitre.org)
http://www.vupen.com/english/advisories/2007/1992(cve@mitre.org)
https://exchange.xforce.ibmcloud.com/vulnerabilities/34590(cve@mitre.org)
https://www.exploit-db.com/exploits/4009(cve@mitre.org)
http://moaxb.blogspot.com/2007/05/moaxb-29-edraw-office-viewer-component.html(af854a3a-2127-422b-91ae-364da2661108)
http://osvdb.org/36045(af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/25418(af854a3a-2127-422b-91ae-364da2661108)
http://shinnai.altervista.org/viewtopic.php?id=42&t_id=32(af854a3a-2127-422b-91ae-364da2661108)
http://www.ocxt.com/archives/28(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/24229(af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/1992(af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/34590(af854a3a-2127-422b-91ae-364da2661108)
https://www.exploit-db.com/exploits/4009(af854a3a-2127-422b-91ae-364da2661108)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.