119 matches found
Buffer overflow
Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component edrawofficeviewer.ocx 4.0.5.20, and other versions before 5.0, allows remote attackers to cause a denial of service Internet Explorer 7 crash or execute arbitrary code via a long first argument to the HttpDownloadFi...
Design/Logic Flaw
A certain ActiveX control in the EDraw Office Viewer Component edrawofficeviewer.ocx 4.0.5.20, and other versions before 5.0, allows remote attackers to delete arbitrary files via the DeleteLocalFile method...
CVE-2007-3168
A certain ActiveX control in the EDraw Office Viewer Component edrawofficeviewer.ocx 4.0.5.20, and other versions before 5.0, allows remote attackers to delete arbitrary files via the DeleteLocalFile method...
CVE-2007-3169
Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component edrawofficeviewer.ocx 4.0.5.20, and other versions before 5.0, allows remote attackers to cause a denial of service Internet Explorer 7 crash or execute arbitrary code via a long first argument to the HttpDownloadFi...
CVE-2007-3168
The Office Viewer Component ActiveX control (edrawofficeviewer.ocx) in EDraw Office Viewer Component versions 4.0.5.20 and earlier than 5.0 is affected. The CVE-2007-3168 entry describes a vulnerability where remote attackers can delete arbitrary files via the DeleteLocalFile method. The connecte...
CVE-2007-3169
EDraw Office Viewer Component (officeviewer.ocx) ActiveX controls are affected across multiple CVEs (e.g., CVE-2007-3169, CVE-2007-4821, CVE-2007-5257). Affected versions include Office Viewer Component 5.0 and earlier for HttpDownloadFile/HttpDownloadFileToTempDir and 5.3.220.1 and earlier for F...
CVE-2007-3168
A certain ActiveX control in the EDraw Office Viewer Component edrawofficeviewer.ocx 4.0.5.20, and other versions before 5.0, allows remote attackers to delete arbitrary files via the DeleteLocalFile method...
CVE-2007-3169
Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component edrawofficeviewer.ocx 4.0.5.20, and other versions before 5.0, allows remote attackers to cause a denial of service Internet Explorer 7 crash or execute arbitrary code via a long first argument to the HttpDownloadFi...
CVE-2007-3168: Undefined Security Weakness
A certain ActiveX control in the EDraw Office Viewer Component edrawofficeviewer.ocx 4.0.5.20, and other versions before 5.0, allows remote attackers to delete arbitrary files via the DeleteLocalFile method...
CVE-2007-3169: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component edrawofficeviewer.ocx 4.0.5.20, and other versions before 5.0, allows remote attackers to cause a denial of service Internet Explorer 7 crash or execute arbitrary code via a long first argument to the HttpDownloadFi...
EDraw Office Viewer Component Denial of Service Exploit
No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/29/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"--------------------------------------------------------------------------------------------- bEDraw Office Viewer...
EDraw Office Viewer Component EDrawOfficeViewer.OCX ActiveX控件缓冲区溢出漏洞
EDraw Office Viewer是一款文字处理组件。 EDraw Office Viewer提供的edrawofficeviewer.ocx ActiveX控件处理参数输入缺少正确边界检查，远程攻击者可以利用漏洞对应用程序进行缓冲区溢出攻击，可能以进程权限执行任意指令。 问题存在于edrawofficeviewer.ocx包含的控件由于不正确处理用户提交的参数，构建恶意WEB页，诱使用户访问，可导致应用程序崩溃。 EDraw Office Viewer Component 4.0.5.20 目前没有解决方案提供： http://www.ocxt.com/...
edraw-unsafe.txt
2007/05/28 ----------------------------------------------------------------------------------------------- EDraw Office Viewer Component edrawofficeviewer.ocx v. 4.0.5.20 Unsafe Method Vulnerability url: http://www.ocxt.com/officeviewer.php author: shinnai mail: shinnaiatautisticidotorg site:...
edraw-dos.txt
2007/05/29 --------------------------------------------------------------------------------------------- EDraw Office Viewer Component edrawofficeviewer.ocx v. 4.0.5.20 Denial of Service Exploit url: http://www.ocxt.com/officeviewer.php author: shinnai mail: shinnaiatautisticidotorg site:...
EDraw Office Viewer Component Unsafe Method Exploit
Exploit for unknown platform in category remote exploits =================================================== EDraw Office Viewer Component Unsafe Method Exploit =================================================== 2007/05/28...
EDraw Office Viewer Component Unsafe Method Exploit
No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/28/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------------------------- bEDraw Office Viewer...
EDraw Office Viewer Component - Denial of Service
EDraw Office Viewer Component - Denial of Service 2007/05/29 --------------------------------------------------------------------------------------------- EDraw Office Viewer Component edrawofficeviewer.ocx v. 4.0.5.20 Denial of Service Exploit url: http://www.ocxt.com/officeviewer.php author:...
EDraw Office Viewer Component - Denial of Service
2007/05/29 --------------------------------------------------------------------------------------------- EDraw Office Viewer Component edrawofficeviewer.ocx v. 4.0.5.20 Denial of Service Exploit url: http://www.ocxt.com/officeviewer.php author: shinnai mail: shinnaiatautisticidotorg site:...
EDraw Office Viewer Component - Unsafe Method
2007/05/28 ----------------------------------------------------------------------------------------------- EDraw Office Viewer Component edrawofficeviewer.ocx v. 4.0.5.20 Unsafe Method Vulnerability url: http://www.ocxt.com/officeviewer.php author: shinnai mail: shinnaiatautisticidotorg site:...