2007/05/29
---------------------------------------------------------------------------------------------
EDraw Office Viewer Component (edrawofficeviewer.ocx v. 4.0.5.20) Denial of Service Exploit
url: http://www.ocxt.com/officeviewer.php
author: shinnai
mail: shinnai[at]autistici[dot]org
site: http://shinnai.altervista.org
Tested on Windows XP Professional SP2 all patched, with Internet Explorer 7
all software that use this ocx are vulnerable to this exploits.
This ActiveX is marked as:
RegKey Safe for Script: True
RegKey Safe for Init: True
KillBitSet: False
---------------------------------------------------------------------------------------------