CVE-2007-5257

Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and earlier allows remote attackers to execute arbitrary code via long strings in the first and second arguments to the FtpDownloadFile method, a different vector...

CVE-2007-5257: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and earlier allows remote attackers to execute arbitrary code via long strings in the first and second arguments to the FtpDownloadFile method, a different vector...

EDraw Office Viewer Component 5.3 FtpDownloadFile() Remote BoF

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------- bEDraw Office Viewer Component 5.3 "FtpDownloadFile" Remote BoF/b url:...

edraw53-activex.txt

----------------------------------------------------------------------------- EDraw Office Viewer Component 5.3 "FtpDownloadFile" Remote BoF url: http://www.ocxt.com/officeviewer.php Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educationa...

EDraw Office Viewer ActiveX (officeviewer.ocx) HttpDownloadFileToTempDir Method Overflow

The remote host contains the EDraw Office Viewer Component, an ActiveX control for working with Microsoft Office documents. The version of this control installed on the remote host contains a buffer overflow that can be triggered by a long value for the first argument of the...

EDraw Office Viewer Component 5.3 FtpDownloadFile() Remote BoF

Exploit for unknown platform in category dos / poc ============================================================== EDraw Office Viewer Component 5.3 FtpDownloadFile Remote BoF ==============================================================...

EDraw Office Viewer Component 5.3 - 'FtpDownloadFile()' Remote Buffer Overflow

----------------------------------------------------------------------------- EDraw Office Viewer Component 5.3 "FtpDownloadFile" Remote BoF url: http://www.ocxt.com/officeviewer.php Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educationa...

CVE-2007-4821

CVE-2007-4821 affects the EDraw Office Viewer Component (officeviewer.ocx) version 5.2 (and earlier per related entries) and is caused by a buffer overflow in the HttpDownloadFileToTempDir method. The vulnerability allows remote attackers to execute arbitrary code by passing a long value as the f...

CVE-2007-4821: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in a certain ActiveX control in officeviewer.ocx 5.2.218.1 in EDraw Office Viewer Component 5.2 allows remote attackers to execute arbitrary code via a long first argument to the HttpDownloadFileToTempDir method, a different vulnerability than CVE-2007-3169...

EDraw Office Viewer Component 5.2 ActiveX Remote BoF PoC

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"-------------------------------------------------------------------------------------------------------------- b0-day EDraw Office Viewer Component 5.2 officeviewer.ocx v. 5.2.218.1...

edraw-activex.txt

-------------------------------------------------------------------------------------------------------------- 0-day EDraw Office Viewer Component 5.2 officeviewer.ocx v. 5.2.218.1 "HttpDownloadFileToTempDir" Remote Buffer Overflow url: http://www.ocxt.com/officeviewer.php author: shinnai mail:...

EDraw Office Viewer Component 5.2 ActiveX Remote BoF PoC

Exploit for unknown platform in category dos / poc ======================================================== EDraw Office Viewer Component 5.2 ActiveX Remote BoF PoC ========================================================...

EDraw Office Viewer Component 5.2 - ActiveX Remote Buffer Overflow (PoC)

EDraw Office Viewer Component 5.2 - ActiveX Remote Buffer Overflow PoC -------------------------------------------------------------------------------------------------------------- 0-day EDraw Office Viewer Component 5.2 officeviewer.ocx v. 5.2.218.1 "HttpDownloadFileToTempDir" Remote Buffer...

CVE-2007-4420

Absolute path traversal vulnerability in a certain ActiveX control in officeviewer.ocx 5.1.199.1 in EDraw Office Viewer Component 5.1 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the HttpDownloadFile method, a different vulnerability...

CVE-2007-4420: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in a certain ActiveX control in officeviewer.ocx 5.1.199.1 in EDraw Office Viewer Component 5.1 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the HttpDownloadFile method, a different vulnerability...

edraw-insecure.txt

-------------------------------------------------------------------------------------------------------------- 0-day EDraw Office Viewer Component 5.1 officeviewer.ocx v. 5.1.199.1 "HttpDownloadFile" Insecure Method url: http://www.ocxt.com/officeviewer.php author: shinnai mail:...

EDraw Office Viewer Component 5.1 HttpDownloadFile() Insecure Method

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"--------------------------------------------------------------------------------------------------------------...

EDraw Office Viewer Component 5.1 HttpDownloadFile() Insecure Method

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"-------------------------------------------------------------------------------------------------------------- b0-day EDraw Office Viewer Component 5.1 officeviewer.ocx v. 5.1.199.1...

EDraw Office Viewer Component 5.1 - HttpDownloadFile() Insecure Method

EDraw Office Viewer Component 5.1 - HttpDownloadFile Insecure Method -------------------------------------------------------------------------------------------------------------- 0-day EDraw Office Viewer Component 5.1 officeviewer.ocx v. 5.1.199.1 "HttpDownloadFile" Insecure Method url:...

EDraw Office Viewer Component 5.1 - HttpDownloadFile() Insecure Method

-------------------------------------------------------------------------------------------------------------- 0-day EDraw Office Viewer Component 5.1 officeviewer.ocx v. 5.1.199.1 "HttpDownloadFile" Insecure Method url: http://www.ocxt.com/officeviewer.php author: shinnai mail:...