CVE-2007-5257
Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in...
CVE-2007-5257 is a high vulnerability (CVSS 10.0) in Edraw Office Viewer Component, published October 6, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 15.2%, the 96th percentile. No source names a fixed version.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 15.2%EPSS, 96th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and earlier allows remote attackers to execute arbitrary code via long strings in the first and second arguments to the FtpDownloadFile method, a different vector than CVE-2007-4821 and CVE-2007-3169.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | EDraw Office Viewer Component 5.3 - 'FtpDownloadFile()' Remote Buffer Overflow | 2007-10-01 |
What each source reports
NVD Score used
Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and earlier allows remote attackers to execute arbitrary code via long strings in the first and second arguments to the FtpDownloadFile method, a different vector than CVE-2007-4821 and CVE-2007-3169.
- Record
CVE-2007-5257- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and earlier allows remote attackers to execute arbitrary code via long strings in the first and second arguments to the FtpDownloadFile method, a different vector than CVE-2007-4821 and CVE-2007-3169.
- Record
CVE-2007-5257- Updated
- 2026-11-02
EUVDEUVD-2007-5237No score
Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and earlier allows remote attackers to execute arbitrary code via long strings in the first and second arguments to the FtpDownloadFile method, a different vector than CVE-2007-4821 and CVE-2007-3169.
- Record
EUVD-2007-5237- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hcfg-mpgp-9qwqNo score
Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in...
Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and earlier allows remote attackers to execute arbitrary code via long strings in the first and second arguments to the FtpDownloadFile method, a different vector than CVE-2007-4821 and CVE-2007-3169.
- Record
GHSA-hcfg-mpgp-9qwq- Weakness
- CWE-119
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
osvdb.org/37724
shinnai.altervista.org/exploits/txt/TXT_O5FvsIzILBHQr7QbK2kD.html
secunia.com/advisories/27017
exchange.xforce.ibmcloud.com/vulnerabilities/36879
securityfocus.com/bid/25892
exploit-db.com/exploits/4474
vupen.com/english/advisories/2007/3329
nvd.nist.gov/vuln/detail/CVE-2007-5257
github.com/advisories/GHSA-hcfg-mpgp-9qwq