PT-2007-3907 · Microsoft · Office Viewer Ocx Activex Control

Published 2007-05-09 · Updated 2017-07-29 · CVE-2007-2588

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Office Viewer OCX ActiveX control (oa.ocx) version 3.2

Description The issue is related to multiple buffer overflows in the Office Viewer OCX ActiveX control. This can be exploited by remote attackers who send a long argument to certain functions, potentially causing a denial of service or possibly allowing the execution of arbitrary code. The affected functions include HttpDownloadFile(), Open(), OpenWebFile(), DoOleCommand(), FTPDownloadFile(), FTPUploadFile(), HttpUploadFile(), Save(), and SaveWebFile().

Recommendations For Office Viewer OCX ActiveX control (oa.ocx) version 3.2, consider disabling the affected functions until a patch is available. Restrict access to the oa.ocx control to minimize the risk of exploitation. Avoid using long arguments in the affected functions to prevent potential buffer overflows.

Exploit

Fix

Related Identifiers

CVE-2007-2588

Affected Products

Office Viewer Ocx Activex Control

References · 9

• 🔥 http://securityfocus.com/bid/23811 · Exploit
• 🔥 https://exploit-db.com/exploits/3845 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-2588 · Security Note
• http://secunia.com/advisories/25143 · Vendor Advisory
• http://osvdb.org/34335 · Note
• http://shinnai.altervista.org/moaxb/20070504/oa.txt · Note
• http://moaxb.blogspot.com/2007/05/moaxb-04-office-viewer-oaocx-v-32.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34067 · Note
• http://vupen.com/english/advisories/2007/1664 · Note