critical9.3Public exploit code
CVE-2007-4776
Buffer overflow in Microsoft Visual Basic 6.0 and Enterprise Edition 6.0 SP6 allows user-assisted remote attackers to execute arbitrary code via a Visual Basic…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Visual Basic - '.VBP' Local Buffer Overflow (Metasploit)2010-09-25 · local · windows · Verified
- Microsoft Visual Basic Enterprise 6.0 SP6 - Code Execution2007-09-19 · local · windows · Verified
- Microsoft Visual Basic 6.0 - VBP_Open OLE Local CodeExec2007-09-04 · local · windows · Verified
Impact
Buffer overflow in Microsoft Visual Basic 6.0 and Enterprise Edition 6.0 SP6 allows user-assisted remote attackers to execute arbitrary code via a Visual Basic project (vbp) file containing a long Reference line, related to VBP_Open and OLE. NOTE: there are limited usage scenarios under which this would be a vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Visual Basic | Version 6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/26704
- http://www.osvdb.org/36936
- http://www.securityfocus.com/bid/25629
- http://www.securitytracker.com/id?1018676
- https://www.exploit-db.com/exploits/4361
- https://www.exploit-db.com/exploits/4431
- http://secunia.com/advisories/26704
- http://www.osvdb.org/36936
- http://www.securityfocus.com/bid/25629
- http://www.securitytracker.com/id?1018676
- https://www.exploit-db.com/exploits/4361
- https://www.exploit-db.com/exploits/4431