Integer Overflow Vulnerability in Microsoft Visual Basic and Visual FoxPro

CVE-2008-4254

Summary

The Hierarchical FlexGrid ActiveX control in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 and 9.0 versions is susceptible to multiple integer overflows. These overflows occur due to improper handling of Rows and Cols properties within the ExpandAll and CollapseAll methods. Attackers can exploit this vulnerability to execute arbitrary code remotely, potentially leading to unauthorized access and control over the affected system. This issue is linked to the mishandling of improperly initialized objects and the resulting corruption of system state.

References