CVE-2007-5257

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 15.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-10-06 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and earlier allows remote attackers to execute arbitrary code via long strings in the first and second arguments to the FtpDownloadFile method, a different vector than CVE-2007-4821 and CVE-2007-3169.

Affected products

Edraw Office Viewer Component: through 5.3.220.1

References

http://osvdb.org/37724
http://secunia.com/advisories/27017
http://shinnai.altervista.org/exploits/txt/TXT_O5FvsIzILBHQr7QbK2kD.html
http://www.securityfocus.com/bid/25892
http://www.vupen.com/english/advisories/2007/3329
https://exchange.xforce.ibmcloud.com/vulnerabilities/36879
https://www.exploit-db.com/exploits/4474
http://osvdb.org/37724
http://secunia.com/advisories/27017
http://shinnai.altervista.org/exploits/txt/TXT_O5FvsIzILBHQr7QbK2kD.html
http://www.securityfocus.com/bid/25892
http://www.vupen.com/english/advisories/2007/3329

Get alerted when CVE-2007-5257 or the next vulnerability affects your stack