Schweregrad: : Crítico
  Identificador(es) CVE: : CVE-2007-5257
  Data do informe: 21 julho 2015

  Descrição

Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and earlier allows remote attackers to execute arbitrary code via long strings in the first and second arguments to the FtpDownloadFile method, a different vector than CVE-2007-4821 and CVE-2007-3169.

  Exposição das informações

Apply associated Trend Micro DPI Rules.

  Solução

  Trend Micro Deep Security DPI Rule Number: 1002428
  Trend Micro Deep Security DPI Rule Name: 1002428 - Microsoft Internet Explorer EDraw ActiveX FTPDownloadFile Buffer Overflow

  Software infectado e versão:

  • EDraw Office Viewer Component 5.3.220.1