CVE-2007-3168

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-06-11 · updated 2026-06-16

Description

A certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions before 5.0, allows remote attackers to delete arbitrary files via the DeleteLocalFile method.

Affected products

Edraw Office Viewer Component: through 5.0; 4.0.5.20

References

http://moaxb.blogspot.com/2007/05/moaxb-28-edraw-office-viewer-component.html
http://osvdb.org/36044
http://secunia.com/advisories/25418
http://shinnai.altervista.org/viewtopic.php?id=42&t_id=31
http://www.ocxt.com/archives/28
http://www.securityfocus.com/bid/24230
http://www.vupen.com/english/advisories/2007/1992
https://exchange.xforce.ibmcloud.com/vulnerabilities/34588
https://www.exploit-db.com/exploits/4010
http://moaxb.blogspot.com/2007/05/moaxb-28-edraw-office-viewer-component.html
http://osvdb.org/36044
http://secunia.com/advisories/25418

Get alerted when CVE-2007-3168 or the next vulnerability affects your stack