vendor:
Edraw Office Viewer Component
by:
N/A
7,5
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: Edraw Office Viewer Component
Affected Version From: 5.6.5781
Affected Version To: 5.6.5781
Patch Exists: YES
Related CWE: N/A
CPE: a:edrawsoft:edraw_office_viewer_component
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Microsoft Windows XP Professional SP3 (EN)
N/A
EdrawSoft Office Viewer Component ActiveX 5.6 (officeviewermme.ocx) BoF PoC
Edraw Office Viewer Component contains a standard ActiveX control that acts as an ActiveX document container for hosting Office documents (including Microsoft Word, Microsoft Excel, Microsoft PowerPoint, Microsoft Project, and Microsoft Visio documents) in a custom form or Web page. The control is lightweight and flexible, and gives developers new possibilities for using Office in a custom solution. The ActiveX suffers from a buffer overflow vulnerability when parsing large amount of bytes to the FtpUploadFile member in FtpUploadFile() function, resulting memory corruption overwriting severeal registers including the SEH. An attacker can gain access to the system of the affected node and execute arbitrary code.
Mitigation:
Upgrade to the latest version of Edraw Office Viewer Component.
