Approved changes feed: RSS · Atom

cpe:2.3:a:edraw:office_viewer_component:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEdraw (b3822e34-8476-596b-88f9-9e6a3e046af3)
ProductOffice Viewer Component (4c416c9c-95b6-599f-989d-c12668aa0625)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-5257 vulnerable 2026-06-08 04:50:04.738138 Details available
Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and earlier allows remote attackers to execute arbitrary code via long strings in the first and second arguments to the FtpDownloadFile method, a different vector than CVE-2007-4821 and CVE-2007-3169.
Published: 2007-10-06T17:00:00.000Z
Updated: 2024-08-07T15:24:42.284Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3169 vulnerable 2026-06-08 04:49:53.386820 Details available
Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions before 5.0, allows remote attackers to cause a denial of service (Internet Explorer 7 crash) or execute arbitrary code via a long first argument to the HttpDownloadFile method.
Published: 2007-06-11T22:00:00.000Z
Updated: 2024-08-07T14:05:29.189Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3168 vulnerable 2026-06-08 04:49:53.385481 Details available
A certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions before 5.0, allows remote attackers to delete arbitrary files via the DeleteLocalFile method.
Published: 2007-06-11T22:00:00.000Z
Updated: 2024-08-07T14:05:29.353Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.