CVE-2007-2496

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-05-04 · updated 2026-06-16

Description

The WordOCX ActiveX control in WordViewer.ocx 3.2.0.5 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) DoOleCommand, (2) FTPDownloadFile, (3) FTPUploadFile, (4) HttpUploadFile, (5) GotoPage, (6) Save, (7) SaveWebFile, (8) HttpDownloadFile, (9) Open, (10) OpenWebFile, (11) SaveAs, or (12) ShowWordStandardDialog property value.

Affected products

Office Ocx Word Viewer Ocx: 3.2.0.5

References

http://moaxb.blogspot.com/2007/05/moaxb-03-wordviewerocx-32-multiple_03.html
http://osvdb.org/34334
http://secunia.com/advisories/25100
http://www.securityfocus.com/bid/23784
http://www.vupen.com/english/advisories/2007/1634
https://exchange.xforce.ibmcloud.com/vulnerabilities/34027
http://moaxb.blogspot.com/2007/05/moaxb-03-wordviewerocx-32-multiple_03.html
http://osvdb.org/34334
http://secunia.com/advisories/25100
http://www.securityfocus.com/bid/23784
http://www.vupen.com/english/advisories/2007/1634
https://exchange.xforce.ibmcloud.com/vulnerabilities/34027

Get alerted when CVE-2007-2496 or the next vulnerability affects your stack