medium6.8Public exploit code
CVE-2007-4254
Stack-based buffer overflow in a certain ActiveX control in VDT70.DLL in Microsoft Visual Database Tools Database Designer 7.0 for Microsoft Visual Studio 6 al…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Visual 6 - 'VDT70.dll NotSafe' Remote Stack Overflow2007-08-06 · remote · windows · Verified
Impact
Stack-based buffer overflow in a certain ActiveX control in VDT70.DLL in Microsoft Visual Database Tools Database Designer 7.0 for Microsoft Visual Studio 6 allows remote attackers to execute arbitrary code via a long argument to the NotSafe method. NOTE: this may overlap CVE-2007-2885 or CVE-2005-2127.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Visual Database Tools Database Designer | Version 7.0 |
| Microsoft | Visual Studio | Version 6.0 |