Unscored severity · published Jan 23, 2008
CVE-2008-0392
Multiple buffer overflows in Microsoft Visual Basic Enterprise Edition 6.0 SP6 allow user-assisted remote attackers to execute arbitrary code via a .dsr file with a long (1)…
–
CVSS
30.5%
EPSS
No
On KEV
Description
Multiple buffer overflows in Microsoft Visual Basic Enterprise Edition 6.0 SP6 allow user-assisted remote attackers to execute arbitrary code via a .dsr file with a long (1) ConnectionName or (2) CommandName line.
Exploitation
Is it being used?
Exploit prediction (EPSS)30.5% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VB
Visual Basic · Microsoft
6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0392
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0392
secunia.com
http://secunia.com/advisories/28563
Exploit
http://www.securityfocus.com/bid/27349
www.securitytracker.com
http://www.securitytracker.com/id?1019258
www.vupen.com
http://www.vupen.com/english/advisories/2008/0195
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/39773
www.exploit-db.com
https://www.exploit-db.com/exploits/4938
More from Visual Basic
8.8
CVE-2012-1856
Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
8.8
CVE-2012-0158
Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
–
CVE-2008-4256
The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors…
–
CVE-2008-4255
Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1…
–
CVE-2008-4254
Multiple integer overflows in the Hierarchical FlexGrid ActiveX control (mshflxgd.ocx) in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allow remote…