CVE-2007-2588

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-05-10 · updated 2026-06-16

Description

Multiple buffer overflows in the Office Viewer OCX ActiveX control (oa.ocx) 3.2 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long argument to the (1) HttpDownloadFile, (2) Open, (3) OpenWebFile, (4) DoOleCommand, (5) FTPDownloadFile, (6) FTPUploadFile, (7) HttpUploadFile, (8) Save, or (9) SaveWebFile function.

Affected products

Office Ocx Office Viewer Ocx: 3.2

References

http://moaxb.blogspot.com/2007/05/moaxb-04-office-viewer-oaocx-v-32.html
http://osvdb.org/34335
http://secunia.com/advisories/25143
http://www.securityfocus.com/bid/23811
http://www.shinnai.altervista.org/moaxb/20070504/oa.txt
http://www.vupen.com/english/advisories/2007/1664
https://exchange.xforce.ibmcloud.com/vulnerabilities/34067
http://moaxb.blogspot.com/2007/05/moaxb-04-office-viewer-oaocx-v-32.html
http://osvdb.org/34335
http://secunia.com/advisories/25143
http://www.securityfocus.com/bid/23811
http://www.shinnai.altervista.org/moaxb/20070504/oa.txt

Get alerted when CVE-2007-2588 or the next vulnerability affects your stack