medium6.8Public exploit code
CVE-2007-6028
Multiple stack-based buffer overflows in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne FlexGrid 7.1 Light allow remote attackers to cause a denial…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ComponentOne FlexGrid 7.1 - ActiveX Control Multiple Buffer Overflow Vulnerabilities2007-11-15 · remote · windows · Verified
Impact
Multiple stack-based buffer overflows in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne FlexGrid 7.1 Light allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long string in the (1) Text, (2) EditSelText, (3) EditText, and (4) CellFontName property values.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Componentone | Flexgrid | Version 7.1_light |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=full-disclosure&m=119517573408574&w=2
- http://www.securityfocus.com/bid/26467
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38507
- http://marc.info/?l=full-disclosure&m=119517573408574&w=2
- http://www.securityfocus.com/bid/26467
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38507