CVE-2007-5257

CRITICAL 10.0CVE-2007-5257 · Published 06/10/2007 · updated 16/06/2026

Package	Affected versions	Patched versions
office viewer component edraw	`≤ 5.3.220.1`	No fix yet

Description

Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and earlier allows remote attackers to execute arbitrary code via long strings in the first and second arguments to the FtpDownloadFile method, a different vector than CVE-2007-4821 and CVE-2007-3169.

References

osvdb.org/37724
secunia.com/advisories/27017 · Vendor Advisory
shinnai.altervista.org/exploits/txt/TXT_O5FvsIzILBHQr7QbK2kD.html · Exploit
securityfocus.com/bid/25892 · Exploit
vupen.com/english/advisories/2007/3329
exchange.xforce.ibmcloud.com/vulnerabilities/36879
exploit-db.com/exploits/4474

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free