Lucene search

MitreCVE-2007-2494

HistoryMay 04, 2007 - 12:19 a.m.

CVE-2007-2494

2007-05-0400:19:00

mitre

web.nvd.nist.gov

cve-2007-2494

buffer overflow

powerpointocx

activex

denial of service

internet explorer 7 crash

remote attackers

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.8

Confidence

High

EPSS

0.105

Percentile

95.1%

JSON

Multiple stack-based buffer overflows in the PowerPointOCX ActiveX control in PowerPointViewer.ocx 3.1.0.3 allow remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) DoOleCommand, (2) FTPDownloadFile, (3) FTPUploadFile, (4) HttpUploadFile, (5) Save, (6) SaveWebFile, (7) HttpDownloadFile, (8) Open, or (9) OpenWebFile property value. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd

Node

office_ocxpowerpoint_viewer_ocxRange≤3.1.0.3

VendorProductVersionCPE
office_ocxpowerpoint_viewer_ocx*cpe:2.3:a:office_ocx:powerpoint_viewer_ocx:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
office_ocx	powerpoint_viewer_ocx	*	cpe:2.3:a:office_ocx:powerpoint_viewer_ocx::::::::

References

moaxb.blogspot.com/2007/05/moaxb-01-powerpointviewerocx-31.html

osvdb.org/34332

secunia.com/advisories/25092

www.securityfocus.com/bid/23733

www.vupen.com/english/advisories/2007/1612

exchange.xforce.ibmcloud.com/vulnerabilities/34013

www.exploit-db.com/exploits/3826

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.8

Confidence

High

EPSS

0.105

Percentile

95.1%

JSON

Related for CVE-2007-2494