CVE-2007-2496: Office Ocx Word Viewer Ocx

High severity, CVSS 7.8. EPSS: 3.8% chance of exploitation in the next 30 days.

The WordOCX ActiveX control in WordViewer.ocx 3.2.0.5 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) DoOleCommand, (2) FTPDownloadFile, (3) FTPUploadFile, (4) HttpUploadFile, (5) GotoPage, (6) Save, (7) SaveWebFile, (8) HttpDownloadFile, (9) Open, (10) OpenWebFile, (11) SaveAs, or (12) ShowWordStandardDialog property value.

Affected products

Published 2007-05-04. Last modified 2026-06-16.