Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2007-5257
HistoryOct 06, 2007 - 5:17 p.m.

CVE-2007-5257

2007-10-0617:17:00
CWE-119
mitre
web.nvd.nist.gov
20
cve-2007-5257
stack-based buffer overflow
edraw.officeviewer
activex
remote code execution
cve-2007-4821
cve-2007-3169

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.228

Percentile

96.6%

JSON

Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and earlier allows remote attackers to execute arbitrary code via long strings in the first and second arguments to the FtpDownloadFile method, a different vector than CVE-2007-4821 and CVE-2007-3169.

Affected configurations

Nvd
Node
edrawoffice_viewer_componentRange≤5.3.220.1
VendorProductVersionCPE
edrawoffice_viewer_component*cpe:2.3:a:edraw:office_viewer_component:*:*:*:*:*:*:*:*

Related

cvelist 4
nvd 4
prion 4
exploitdb 3
nessus 3
cve 3
cvelist
cvelist
CVE-2007-5257
2007-10-06 17:00:00
CVE-2007-4821
2007-09-11 19:00:00
CVE-2007-3169
2007-06-11 22:00:00
nvd
nvd
CVE-2007-5257
2007-10-06 17:17:00
CVE-2007-4821
2007-09-11 19:17:00
CVE-2007-3169
2007-06-11 22:30:00
prion
prion
Stack overflow
2007-10-06 17:17:00
Buffer overflow
2007-09-11 19:17:00
Buffer overflow
2007-06-11 22:30:00
exploitdb
exploitdb
EDraw Office Viewer Component 5.3 - 'FtpDownloadFile()' Remote Buffer Overflow
2007-10-01 00:00:00
EDraw Office Viewer Component 5.2 - ActiveX Remote Buffer Overflow (PoC)
2007-09-07 00:00:00
EDraw Office Viewer Component - Denial of Service
2007-05-30 00:00:00
nessus
nessus
EDraw Office Viewer ActiveX (EDraw.OfficeViewer) FtpDownloadFile Method Overflow
2008-03-04 00:00:00
EDraw Office Viewer ActiveX (officeviewer.ocx) HttpDownloadFileToTempDir Method Overflow
2007-10-02 00:00:00
Office Viewer Component < 5.0 Multiple Vulnerabilities
2007-09-10 00:00:00
cve
cve
CVE-2007-4821
2007-09-11 19:17:00
CVE-2007-3169
2007-06-11 22:30:00
CVE-2007-4420
2007-08-18 21:17:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.228

Percentile

96.6%

JSON
Related for CVE-2007-5257
cvelist4nvd4prion4exploitdb3nessus3cve3