CVE-2007-2884

Multiple stack-based buffer overflows in Microsoft Visual Basic 6 allow user-assisted remote attackers to cause a denial of service (CPU consumption) or execute arbitrary code via a Visual Basic Project (vbp) file with a long (1) Description or (2) Company Name (VersionCompanyName) field.

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2007-05-30

Last modified

2024-08-07

Weaknesses

CWE-20, CWE-399

Affected products

• Visual Basic (Microsoft)

References

• http://osvdb.org/41052
• http://osvdb.org/41053
• http://www.securityfocus.com/bid/24128
• http://www.securityfocus.com/bid/24129
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34475
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34476
• https://www.exploit-db.com/exploits/3976
• https://www.exploit-db.com/exploits/3977