CVE-2007-2588 - Vulnerability Details - OpenCVE

Multiple buffer overflows in the Office Viewer OCX ActiveX control (oa.ocx) 3.2 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long argument to the (1) HttpDownloadFile, (2) Open, (3) OpenWebFile, (4) DoOleCommand, (5) FTPDownloadFile, (6) FTPUploadFile, (7) HttpUploadFile, (8) Save, or (9) SaveWebFile function.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Office Ocx	Office Viewer Ocx

Configuration 1 [-]

cpe:2.3:a:office_ocx:office_viewer_ocx:3.2:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://moaxb.blogspot.com/2007/05/moaxb-04-office-viewer-oaocx-v-32.html
http://osvdb.org/34335
http://secunia.com/advisories/25143
http://www.securityfocus.com/bid/23811
http://www.shinnai.altervista.org/moaxb/20070504/oa.txt
http://www.vupen.com/english/advisories/2007/1664
https://exchange.xforce.ibmcloud.com/vulnerabilities/34067

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-05-09T22:00:00

Updated: 2024-08-07T13:42:33.427Z

Reserved: 2007-05-09T00:00:00

Link: CVE-2007-2588

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2007-05-10T00:19:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2007-2588

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-05-04T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple buffer overflows in the Office Viewer OCX ActiveX control (oa.ocx) 3.2 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long argument to the (1) HttpDownloadFile, (2) Open, (3) OpenWebFile, (4) DoOleCommand, (5) FTPDownloadFile, (6) FTPUploadFile, (7) HttpUploadFile, (8) Save, or (9) SaveWebFile function."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "25143", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/25143"}, {"name": "ADV-2007-1664", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/1664"}, {"tags": ["x_refsource_MISC"], "url": "http://moaxb.blogspot.com/2007/05/moaxb-04-office-viewer-oaocx-v-32.html"}, {"tags": ["x_refsource_MISC"], "url": "http://www.shinnai.altervista.org/moaxb/20070504/oa.txt"}, {"name": "34335", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/34335"}, {"name": "23811", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/23811"}, {"name": "office-viewer-oaocx-bo(34067)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34067"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-2588", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple buffer overflows in the Office Viewer OCX ActiveX control (oa.ocx) 3.2 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long argument to the (1) HttpDownloadFile, (2) Open, (3) OpenWebFile, (4) DoOleCommand, (5) FTPDownloadFile, (6) FTPUploadFile, (7) HttpUploadFile, (8) Save, or (9) SaveWebFile function."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "25143", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/25143"}, {"name": "ADV-2007-1664", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/1664"}, {"name": "http://moaxb.blogspot.com/2007/05/moaxb-04-office-viewer-oaocx-v-32.html", "refsource": "MISC", "url": "http://moaxb.blogspot.com/2007/05/moaxb-04-office-viewer-oaocx-v-32.html"}, {"name": "http://www.shinnai.altervista.org/moaxb/20070504/oa.txt", "refsource": "MISC", "url": "http://www.shinnai.altervista.org/moaxb/20070504/oa.txt"}, {"name": "34335", "refsource": "OSVDB", "url": "http://osvdb.org/34335"}, {"name": "23811", "refsource": "BID", "url": "http://www.securityfocus.com/bid/23811"}, {"name": "office-viewer-oaocx-bo(34067)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34067"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T13:42:33.427Z"}, "title": "CVE Program Container", "references": [{"name": "25143", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/25143"}, {"name": "ADV-2007-1664", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/1664"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://moaxb.blogspot.com/2007/05/moaxb-04-office-viewer-oaocx-v-32.html"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.shinnai.altervista.org/moaxb/20070504/oa.txt"}, {"name": "34335", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/34335"}, {"name": "23811", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/23811"}, {"name": "office-viewer-oaocx-bo(34067)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34067"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-2588", "datePublished": "2007-05-09T22:00:00", "dateReserved": "2007-05-09T00:00:00", "dateUpdated": "2024-08-07T13:42:33.427Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:office_ocx:office_viewer_ocx:3.2:*:*:*:*:*:*:*", "matchCriteriaId": "A6B44155-26A0-4C40-AEE4-67A1C1798483", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple buffer overflows in the Office Viewer OCX ActiveX control (oa.ocx) 3.2 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long argument to the (1) HttpDownloadFile, (2) Open, (3) OpenWebFile, (4) DoOleCommand, (5) FTPDownloadFile, (6) FTPUploadFile, (7) HttpUploadFile, (8) Save, or (9) SaveWebFile function."}, {"lang": "es", "value": "M\u00faltiples desbordamientos de b\u00fafer en el control de ActiveX Office Viewer OCX (oa.ocx) 3.2 permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda) o, posiblemente, ejecutar c\u00f3digo de su elecci\u00f3n mediante el paso de un argumento largo a las funciones (1) HttpDownloadFile, (2) Open, (3) OpenWebFile, (4) DoOleCommand, (5) FTPDownloadFile, (6) FTPUploadFile, (7) HttpUploadFile, (8) Save o (9) SaveWebFile."}], "evaluatorImpact": "Failed exploit attempts will likely result in a browser-level denial of service condition.", "id": "CVE-2007-2588", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2007-05-10T00:19:00.000", "references": [{"source": "cve@mitre.org", "url": "http://moaxb.blogspot.com/2007/05/moaxb-04-office-viewer-oaocx-v-32.html"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/34335"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/25143"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/23811"}, {"source": "cve@mitre.org", "url": "http://www.shinnai.altervista.org/moaxb/20070504/oa.txt"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/1664"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34067"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://moaxb.blogspot.com/2007/05/moaxb-04-office-viewer-oaocx-v-32.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/34335"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/25143"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/23811"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.shinnai.altervista.org/moaxb/20070504/oa.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/1664"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34067"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}