Stack-based Buffer Overflow in ActiveX Controls in Microsoft Visual FoxPro Products
CVE-2007-4790
Currently unrated
Key Information:
- Vendor
Microsoft
- Vendor
- CVE Published:
- 10 September 2007
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 73%
What is CVE-2007-4790?
A stack-based buffer overflow occurs in certain ActiveX controls utilized by Microsoft Visual FoxPro 6.0, specifically FPOLE.OCX and Foxtlib.ocx. This vulnerability can be exploited through Internet Explorer versions 5.01, 6 SP1, 6 SP2, and 7, allowing remote attackers to execute arbitrary code by sending a malicious long first argument to the FoxDoCmd function. This flaw highlights the risks associated with outdated ActiveX controls and the necessity for users to keep their software updated.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.