exploitDog

CVE-2007-5257

Опубликовано: 06 окт. 2007

Источник: nvd

CVSS2: 10

EPSS Средний

Описание

Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and earlier allows remote attackers to execute arbitrary code via long strings in the first and second arguments to the FtpDownloadFile method, a different vector than CVE-2007-4821 and CVE-2007-3169.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:edraw:office_viewer_component:*:*:*:*:*:*:*:*

Версия до 5.3.220.1 (включая)

EPSS

Процентиль: 95%

0.15975

Средний

10 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-hcfg-mpgp-9qwq

github

почти 4 года назад

Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and earlier allows remote attackers to execute arbitrary code via long strings in the first and second arguments to the FtpDownloadFile method, a different vector than CVE-2007-4821 and CVE-2007-3169.

EPSS

Процентиль: 95%

0.15975

Средний

10 Critical

CVSS2

Дефекты

CWE-119