Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2007-2496
HistoryMay 04, 2007 - 12:19 a.m.

CVE-2007-2496

2007-05-0400:19:00
[email protected]
web.nvd.nist.gov
3

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.6

Confidence

High

EPSS

0.122

Percentile

95.4%

JSON

The WordOCX ActiveX control in WordViewer.ocx 3.2.0.5 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) DoOleCommand, (2) FTPDownloadFile, (3) FTPUploadFile, (4) HttpUploadFile, (5) GotoPage, (6) Save, (7) SaveWebFile, (8) HttpDownloadFile, (9) Open, (10) OpenWebFile, (11) SaveAs, or (12) ShowWordStandardDialog property value.

Affected configurations

Nvd
Node
office_ocxword_viewer_ocxMatch3.2.0.5
VendorProductVersionCPE
office_ocxword_viewer_ocx3.2.0.5cpe:2.3:a:office_ocx:word_viewer_ocx:3.2.0.5:*:*:*:*:*:*:*

Related

prion 1
exploitdb 1
cvelist 1
cve 1
securityvulns 1
prion
prion
Design/Logic Flaw
2007-05-04 00:19:00
exploitdb
exploitdb
Word Viewer OCX 3.2 - Remote Denial of Service
2007-05-03 00:00:00
cvelist
cvelist
CVE-2007-2496
2007-05-04 00:00:00
cve
cve
CVE-2007-2496
2007-05-04 00:19:00
securityvulns
securityvulns
Office Viewer OCX multiple security vulnerabilities
2007-05-02 00:00:00

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.6

Confidence

High

EPSS

0.122

Percentile

95.4%

JSON
Related for NVD:CVE-2007-2496
prion1exploitdb1cvelist1cve1securityvulns1