Buffer Overflow Vulnerability in Microsoft Visual Basic 6.0 and Enterprise Edition

CVE-2007-4776

Summary

A buffer overflow vulnerability exists in Microsoft Visual Basic 6.0 and Enterprise Edition 6.0 SP6. This vulnerability allows user-assisted remote attackers to execute arbitrary code by providing a specially crafted Visual Basic project (vbp) file containing an excessively long Reference line, particularly during the VBP_Open and OLE processes. While the potential for exploitation is limited, this issue poses a risk to the integrity and security of systems utilizing the affected software.

References