CVE-2007-3168

Severity CVSS v4.0:

Pending analysis

Type:

Unavailable / Other

Publication date:

11/06/2007

Last modified:

09/04/2025

Description

A certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions before 5.0, allows remote attackers to delete arbitrary files via the DeleteLocalFile method.

Impact

Vector 2.0

AV:N/AC:M/Au:N/C:N/I:P/A:C CVSS v2.0 Severity and Metrics:

Base Score: 7.80 HIGH
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:C

Attack Vector (AV): Network
Attack Complexity (AC): Medium
Authentication (Au): None
Confidentiality (C): None
Integrity (I): Physical
Availability (A): Complete