CVE

Id
25851  
CVE No.
CVE-2007-2494  
Status
Candidate  
Description
Multiple stack-based buffer overflows in the PowerPointOCX ActiveX control in PowerPointViewer.ocx 3.1.0.3 allow remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) DoOleCommand, (2) FTPDownloadFile, (3) FTPUploadFile, (4) HttpUploadFile, (5) Save, (6) SaveWebFile, (7) HttpDownloadFile, (8) Open, or (9) OpenWebFile property value. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20070503)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
259458 25851 CVE-2007-2494 MILW0RM:3826  View
259459 25851 CVE-2007-2494 URL:http://www.milw0rm.com/exploits/3826  View
259460 25851 CVE-2007-2494 MISC:http://moaxb.blogspot.com/2007/05/moaxb-01-powerpointviewerocx-31.html  View
259461 25851 CVE-2007-2494 BID:23733  View
259462 25851 CVE-2007-2494 URL:http://www.securityfocus.com/bid/23733  View
259463 25851 CVE-2007-2494 VUPEN:ADV-2007-1612  View
259464 25851 CVE-2007-2494 URL:http://www.vupen.com/english/advisories/2007/1612  View
259465 25851 CVE-2007-2494 OSVDB:34332  View
259466 25851 CVE-2007-2494 URL:http://osvdb.org/34332  View
259467 25851 CVE-2007-2494 SECUNIA:25092  View
259468 25851 CVE-2007-2494 URL:http://secunia.com/advisories/25092  View
259469 25851 CVE-2007-2494 XF:office-powerpoint-ocx-bo(34013)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55111 JVNDB-2007-003803 WordViewer.ocx の WordOCX ActiveX コントロールにおけるサービス運用妨害 (DoS) の脆弱性 WordViewer.ocx の WordOCX ActiveX コントロールには、サービス運用妨害 (Internet Explorer 7 クラッシュ) 状態となる脆弱性が存在します。 CVE-2007-2496 25851 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003803.html  View