CVE-2007-2884
high · 9.3Multiple stack-based buffer overflows in Microsoft Visual Basic 6 allow user-assisted remote attackers to cause a denial of service (CPU consumption) or execute arbitrary code via a Visual Basic Project (vbp) file with a long (1) Description or (2) Company Name (VersionCompanyName) field.
9.3
CVSS
36.2%
EPSS (exploit prob.)
98th
EPSS percentile
2007-05-30
Published
AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20CWE-399
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | visual_basic | 6.0 |
Check a specific version with /api/v1/cve/match.
References
- http://osvdb.org/41052
- http://osvdb.org/41053
- http://www.securityfocus.com/bid/24128
- http://www.securityfocus.com/bid/24129
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34475
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34476
- https://www.exploit-db.com/exploits/3976
- https://www.exploit-db.com/exploits/3977
- http://osvdb.org/41052
- http://osvdb.org/41053
- http://www.securityfocus.com/bid/24128
- http://www.securityfocus.com/bid/24129
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34475
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34476
- https://www.exploit-db.com/exploits/3976
- https://www.exploit-db.com/exploits/3977
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2007-2884