CVE-2007-2884

Currently unrated

Key Information:

Vendor
Microsoft
Status
Visual Basic
Vendor
CVE Published:
30 May 2007

Summary

Multiple stack-based buffer overflows in Microsoft Visual Basic 6 allow user-assisted remote attackers to cause a denial of service (CPU consumption) or execute arbitrary code via a Visual Basic Project (vbp) file with a long (1) Description or (2) Company Name (VersionCompanyName) field.

References

http://osvdb.org/41053
vdb-entryx_refsource_OSVDB
https://exchange.xforce.ibmcloud.com/vulnerabilities/34475
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/3977
exploitx_refsource_EXPLOIT-DB

EPSS Score

21% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.