CVEvulnerability
CVE-2007-5257
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-10-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and earlier allows remote attackers to execute arbitrary code via long strings in the first and second arguments to the FtpDownloadFile method, a different vector than CVE-2007-4821 and CVE-2007-3169.
Affected configurations
• edraw office viewer component (<= 5.3.220.1)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://osvdb.org/37724 osvdb.org
- http://secunia.com/advisories/27017 Vendor Advisory
- http://shinnai.altervista.org/exploits/txt/TXT_O5FvsIzILBHQr7QbK2kD.html Exploit
- http://www.securityfocus.com/bid/25892 Exploit
- http://www.vupen.com/english/advisories/2007/3329 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36879 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4474 www.exploit-db.com
- http://osvdb.org/37724 osvdb.org
- http://secunia.com/advisories/27017 Vendor Advisory
- http://shinnai.altervista.org/exploits/txt/TXT_O5FvsIzILBHQr7QbK2kD.html Exploit
- http://www.securityfocus.com/bid/25892 Exploit
- http://www.vupen.com/english/advisories/2007/3329 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36879 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4474 www.exploit-db.com