medium5.8Public exploit code
CVE-2008-0236
An ActiveX control for Microsoft Visual FoxPro (vfp6r.dll 6.0.8862.0) allows remote attackers to execute arbitrary commands by invoking the DoCmd method.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft FoxServer - 'vfp6r.dll 6.0.8862.0' ActiveX Command Execution2008-01-09 · remote · windows · Verified
Impact
An ActiveX control for Microsoft Visual FoxPro (vfp6r.dll 6.0.8862.0) allows remote attackers to execute arbitrary commands by invoking the DoCmd method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Visual Foxpro | Version 6.0 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/28417
- http://shinnai.altervista.org/exploits/txt/TXT_DiWu9j82RCq4zpaQAoxn.html
- http://www.securityfocus.com/bid/27205
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39558
- https://www.exploit-db.com/exploits/4873
- http://secunia.com/advisories/28417
- http://shinnai.altervista.org/exploits/txt/TXT_DiWu9j82RCq4zpaQAoxn.html
- http://www.securityfocus.com/bid/27205
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39558
- https://www.exploit-db.com/exploits/4873