CVE-2009-2169

no score yetEPSS 4.5%

edraw pdf viewer component: no CVSS score yet. EPSS 4.5% chance of exploitation in the next 30 days.

Insecure method vulnerability in the PDFVIEWER.PDFViewerCtrl.1 ActiveX control (pdfviewer.ocx) in Edraw PDF Viewer Component before 3.2.0.126 allows remote attackers to create and overwrite arbitrary files via a URL argument to the FtpConnect argument and a target filename argument to the FtpDownloadFile method. NOTE: this can be leveraged for code execution by writing to a Startup folder.

EPSS: 4.5% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2009-06-22
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

edraw:pdf_viewer_component

References

http://archives.neohapsis.com/archives/fulldisclosure/2009-06/0198.html
http://secunia.com/advisories/35509
http://archives.neohapsis.com/archives/fulldisclosure/2009-06/0198.html
http://secunia.com/advisories/35509

Check your stack JSON