CVE-2007-4821

CVE-2007-4821 describes a critical buffer overflow vulnerability in the officeviewer.ocx ActiveX control within EDraw Office Viewer Component 5.2. A remote attacker can exploit this by providing a lengthy argument to the HttpDownloadFileToTempDir method, leading to arbitrary code execution. With a CVSS score of 9.3, this vulnerability is highly severe, allowing for complete compromise of confidentiality, integrity, and availability with medium attack complexity and no authentication required. While not listed on the KEV catalog, a proof-of-concept exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.