CVE

Id
25852  
CVE No.
CVE-2007-2495  
Status
Candidate  
Description
Multiple stack-based buffer overflows in the ExcelOCX ActiveX control in ExcelViewer.ocx 3.1.0.6 allow remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) DoOleCommand, (2) FTPDownloadFile, (3) FTPUploadFile, (4) HttpUploadFile, (5) Save, (6) SaveWebFile, (7) HttpDownloadFile, (8) Open, or (9) OpenWebFile property value. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20070503)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
259470 25852 CVE-2007-2495 MILW0RM:3830  View
259471 25852 CVE-2007-2495 URL:http://www.milw0rm.com/exploits/3830  View
259472 25852 CVE-2007-2495 MISC:http://moaxb.blogspot.com/2007/05/moaxb-02-excelviewerocx-v-31-multiple.html  View
259473 25852 CVE-2007-2495 BID:23755  View
259474 25852 CVE-2007-2495 URL:http://www.securityfocus.com/bid/23755  View
259475 25852 CVE-2007-2495 VUPEN:ADV-2007-1613  View
259476 25852 CVE-2007-2495 URL:http://www.vupen.com/english/advisories/2007/1613  View
259477 25852 CVE-2007-2495 OSVDB:34333  View
259478 25852 CVE-2007-2495 URL:http://osvdb.org/34333  View
259479 25852 CVE-2007-2495 SECUNIA:25077  View
259480 25852 CVE-2007-2495 URL:http://secunia.com/advisories/25077  View
259481 25852 CVE-2007-2495 XF:excelviewer-ocx-bo(34011)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56821 JVNDB-2007-005513 RealNetworks RealPlayer におけるサービス運用妨害 (DoS) の脆弱性 RealNetworks RealPlayer には、サービス運用妨害 (メモリ消費) 状態となる脆弱性が存在します。 CVE-2007-2497 25852 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005513.html  View