CVE-2007-5257
Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in...
CVE-2007-5257 is a high vulnerability (CVSS 10.0) in Edraw Office Viewer Component, published October 6, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 15.2%, the 96th percentile. No source names a fixed version.
Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and earlier allows remote attackers to execute arbitrary code via long strings in the first and second arguments to the FtpDownloadFile method, a different vector than CVE-2007-4821 and CVE-2007-3169.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and earlier allows remote attackers to execute arbitrary code via long strings in the first and second arguments to the FtpDownloadFile method, a different vector than CVE-2007-4821 and CVE-2007-3169.
- Record
CVE-2007-5257- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and earlier allows remote attackers to execute arbitrary code via long strings in the first and second arguments to the FtpDownloadFile method, a different vector than CVE-2007-4821 and CVE-2007-3169.
- Record
CVE-2007-5257- Updated
- 2026-11-02
EUVDEUVD-2007-5237 No score
Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and earlier allows remote attackers to execute arbitrary code via long strings in the first and second arguments to the FtpDownloadFile method, a different vector than CVE-2007-4821 and CVE-2007-3169.
- Record
EUVD-2007-5237- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hcfg-mpgp-9qwq No score
Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in...
Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and earlier allows remote attackers to execute arbitrary code via long strings in the first and second arguments to the FtpDownloadFile method, a different vector than CVE-2007-4821 and CVE-2007-3169.
- Record
GHSA-hcfg-mpgp-9qwq- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | EDraw Office Viewer Component 5.3 - 'FtpDownloadFile()' Remote Buffer Overflow | 2007-10-01 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories |
| 2026-11-02 | created | CVE List, NVD |
References
osvdb.org/37724
shinnai.altervista.org/exploits/txt/TXT_O5FvsIzILBHQr7QbK2kD.html
secunia.com/advisories/27017
exchange.xforce.ibmcloud.com/vulnerabilities/36879
securityfocus.com/bid/25892
exploit-db.com/exploits/4474
vupen.com/english/advisories/2007/3329
nvd.nist.gov/vuln/detail/CVE-2007-5257
github.com/advisories/GHSA-hcfg-mpgp-9qwq