Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

PowerPoint Viewer OCX can crash Internet Explorer

CVE-2007-2494 · published 19 years ago
Summary

The PowerPoint Viewer OCX component used by PowerPoint Viewer 3.1.0.3 can be tricked into crashing Internet Explorer when it receives unusually long commands. An attacker on the Internet could send a specially crafted web page that makes the browser stop working for anyone viewing it. Apply the latest security update from Microsoft or disable the PowerPoint Viewer OCX ActiveX control in the browser to prevent this.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
office_ocx powerpoint_viewer_ocx <= 3.1.0.3
cpe:2.3:a:office_ocx:powerpoint_viewer_ocx:*:*:*:*:*:*:*:*
Original advisory text
Multiple stack-based buffer overflows in the PowerPointOCX ActiveX control in PowerPointViewer.ocx 3.1.0.3 allow remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long...
Multiple stack-based buffer overflows in the PowerPointOCX ActiveX control in PowerPointViewer.ocx 3.1.0.3 allow remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) DoOleCommand, (2) FTPDownloadFile, (3) FTPUploadFile, (4) HttpUploadFile, (5) Save, (6) SaveWebFile, (7) HttpDownloadFile, (8) Open, or (9) OpenWebFile property value. NOTE: some of these details are obtained from third party information.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
10.0 Critical
Exploitation
5% chance of attack within 30 days
Timeline
Published4 May 2007
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2007-2494 · NVD
Track software like this
Free during beta