CVE-2007-3168
A certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20,...
CVE-2007-3168 is a high vulnerability (CVSS 7.8) in Edraw Office Viewer Component, published June 11, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.31%, the 93rd percentile. No source names a fixed version.
A certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions before 5.0, allows remote attackers to delete arbitrary files via the DeleteLocalFile method.
Exploit likelihood
What each source reports
NVD Score used
A certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions before 5.0, allows remote attackers to delete arbitrary files via the DeleteLocalFile method.
- Record
CVE-2007-3168- CVSS 2.0
- 7.8 High
AV:N/AC:M/Au:N/C:N/I:P/A:C - Updated
- 2026-11-02
CVE List No score
A certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions before 5.0, allows remote attackers to delete arbitrary files via the DeleteLocalFile method.
- Record
CVE-2007-3168- Updated
- 2026-11-02
EUVDEUVD-2007-3160 No score
A certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions before 5.0, allows remote attackers to delete arbitrary files via the DeleteLocalFile method.
- Record
EUVD-2007-3160- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jc3p-c5fp-9h84 No score
A certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20,...
A certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions before 5.0, allows remote attackers to delete arbitrary files via the DeleteLocalFile method.
- Record
GHSA-jc3p-c5fp-9h84- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | EDraw Office Viewer Component - Unsafe Method | 2007-05-30 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories |
| 2026-11-02 | created | CVE List, NVD |
