Microsoft Internet Explorer EDraw ActiveX FTPDownloadFile Buffer Overflow
Severity: CRITICAL
CVE Identifier: CVE-2007-5257
Advisory Date: JUL 21, 2015
DESCRIPTION
Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and earlier allows remote attackers to execute arbitrary code via long strings in the first and second arguments to the FtpDownloadFile method, a different vector than CVE-2007-4821 and CVE-2007-3169.
TREND MICRO PROTECTION INFORMATION
Apply associated Trend Micro DPI Rules.
SOLUTION
Trend Micro Deep Security DPI Rule Number: 1002428
Trend Micro Deep Security DPI Rule Name: 1002428 - Microsoft Internet Explorer EDraw ActiveX FTPDownloadFile Buffer Overflow
AFFECTED SOFTWARE AND VERSION
- EDraw Office Viewer Component 5.3.220.1