VB
Product
Visual Basic
On CISA KEVExploited in the wildRansomware-linked
19
CVEs
2
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch
Add Visual Basic to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-1856 In wildKEV | 8.8 | Aug 15 | Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability Affected: 6.0 |
| CVE-2012-0158 RansomwareIn wildKEV | 8.8 | Apr 10 | Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability Affected: 6.0 |
| CVE-2008-4256 | – | Dec 10 | The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors… Affected: 6.0 |
| CVE-2008-4255 | – | Dec 10 | Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1… Affected: 6.0 |
| CVE-2008-4254 | – | Dec 10 | Multiple integer overflows in the Hierarchical FlexGrid ActiveX control (mshflxgd.ocx) in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allow remote… Affected: 6.0 |
| CVE-2008-4253 | – | Dec 10 | The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, Office FrontPage 2002 SP3, and Office Project 2003 SP3 does not properly… Affected: 6.0 |
| CVE-2008-4252 | – | Dec 10 | The DataGrid ActiveX control in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized… Affected: 6.0 |
| CVE-2008-3704 | – | Aug 18 | Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic… Affected: 6.0 |
| CVE-2007-0065 | – | Feb 12 | Heap-based buffer overflow in Object Linking and Embedding (OLE) Automation in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, Office 2004 for Mac, and Visual… Affected: 6.0 |
| CVE-2008-0392 | – | Jan 23 | Multiple buffer overflows in Microsoft Visual Basic Enterprise Edition 6.0 SP6 allow user-assisted remote attackers to execute arbitrary code via a .dsr file with a long (1)… Affected: 6.0 |
| CVE-2007-4776 | – | Sep 10 | Buffer overflow in Microsoft Visual Basic 6.0 and Enterprise Edition 6.0 SP6 allows user-assisted remote attackers to execute arbitrary code via a Visual Basic project (vbp) file… Affected: 6.0; 6.0 |
| CVE-2007-2224 | – | Aug 14 | Object linking and embedding (OLE) Automation, as used in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Office 2004 for Mac, and Visual Basic 6.0 allows remote… Affected: 6.0 |
| CVE-2007-2884 | – | May 30 | Multiple stack-based buffer overflows in Microsoft Visual Basic 6 allow user-assisted remote attackers to cause a denial of service (CPU consumption) or execute arbitrary code via… Affected: 6.0 |
| CVE-2006-4732 | – | Sep 13 | Unspecified vulnerability in Microsoft Visual Basic (VB) 6 has an unknown impact ("overflow") via a project that contains a certain Click event procedure, as demonstrated using… Affected: 6.0 |
| CVE-2006-3649 | – | Aug 9 | Buffer overflow in Microsoft Visual Basic for Applications (VBA) SDK 6.0 through 6.4, as used by Microsoft Office 2000 SP3, Office XP SP3, Project 2000 SR1, Project 2002 SP1,… Affected: 6.2; 6.2; 6.3; 6.4 |
| CVE-2004-0200 | – | Sep 28 | Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code… Affected: 2002; 2003 |
| CVE-2003-0347 | – | Oct 20 | Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute arbitrary code via a… Affected: 5.0; 6.2; 6.2; 6.3 |
| CVE-2001-0153 | – | May 3 | Buffer overflow in VB-TSQL debugger object (vbsdicli.exe) in Visual Studio 6.0 Enterprise Edition allows remote attackers to execute arbitrary commands Affected: 6.0 |
| CVE-1999-0384 | – | Jan 1 | The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the user accesses documents with ActiveX… Affected: 5.0 |
Showing 19