← Database

CVE-2007-2588

CRITICAL CVSS: 9.3 Published: 2007-05-10 Modified: 2026-06-16

Description

Multiple buffer overflows in the Office Viewer OCX ActiveX control (oa.ocx) 3.2 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long argument to the (1) HttpDownloadFile, (2) Open, (3) OpenWebFile, (4) DoOleCommand, (5) FTPDownloadFile, (6) FTPUploadFile, (7) HttpUploadFile, (8) Save, or (9) SaveWebFile function.

Affected Platforms

Office Ocx Office Viewer Ocx

Weakness Type

NVD-CWE-Other

References