Back to CVE Browser

CVE-2007-2494

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1490%

EPSS Percentile3.13th

PublishedMay 4, 2007

Last ModifiedApr 23, 2026

Vulnerability Description

Multiple stack-based buffer overflows in the PowerPointOCX ActiveX control in PowerPointViewer.ocx 3.1.0.3 allow remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) DoOleCommand, (2) FTPDownloadFile, (3) FTPUploadFile, (4) HttpUploadFile, (5) Save, (6) SaveWebFile, (7) HttpDownloadFile, (8) Open, or (9) OpenWebFile property value. NOTE: some of these details are obtained from third party information.

Affected Platforms (CPE)

📦

Office Ocx

Powerpoint Viewer Ocx

<= 3.1.0.3

References & Advisories

🔗 http://moaxb.blogspot.com/2007/05/moaxb-01-powerpointviewerocx-31.html

🔗 http://osvdb.org/34332

🔗 http://secunia.com/advisories/25092

🔗 http://www.securityfocus.com/bid/23733

🔗 http://www.vupen.com/english/advisories/2007/1612

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/34013

🔗 https://www.exploit-db.com/exploits/3826

🔗 http://moaxb.blogspot.com/2007/05/moaxb-01-powerpointviewerocx-31.html

Related Vulnerabilities

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...

CVE-2026-121895.3

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzm...

CVE-2026-121886.3

A vulnerability was detected in Grit42 Grit up to 0.11.0. Affected by this issue is some unknown functionality of the file modules...