Multiple stack-based buffer overflows in the PowerPointOCX ActiveX control in PowerPointViewer.ocx 3.1.0.3 allow remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) DoOleCommand (2) FTPDownloadFile (3) FTPUploadFile (4) HttpUploadFile (5) Save (6) SaveWebFile (7) HttpDownloadFile (8) Open or (9) OpenWebFile property value. NOTE: some of these details are obtained from third party information.