Multiple buffer overflows in the Office Viewer OCX ActiveX control (oa.ocx) 3.2 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long argument to the (1) HttpDownloadFile (2) Open (3) OpenWebFile (4) DoOleCommand (5) FTPDownloadFile (6) FTPUploadFile (7) HttpUploadFile (8) Save or (9) SaveWebFile function.