QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2007-3169

Back to search

CVE-2007-3169

Published: Jun 11, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions before 5.0, allows remote attackers to cause a denial of service (Internet Explorer 7 crash) or execute arbitrary code via a long first argument to the HttpDownloadFile method.

VendorProductVersions

n/a

n/a

affected
n/a

References

ADV-2007-1992
vdb-entry
x_refsource_VUPEN
4009
exploit
x_refsource_EXPLOIT-DB
24229
vdb-entry
x_refsource_BID
25418
third-party-advisory
x_refsource_SECUNIA
36045
vdb-entry
x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now