CVE-2007-4254

medium · 6.8

Stack-based buffer overflow in a certain ActiveX control in VDT70.DLL in Microsoft Visual Database Tools Database Designer 7.0 for Microsoft Visual Studio 6 allows remote attackers to execute arbitrary code via a long argument to the NotSafe method. NOTE: this may overlap CVE-2007-2885 or CVE-2005-2127.

6.8

CVSS

11.5%

EPSS (exploit prob.)

96th

EPSS percentile

2007-08-08

Published

AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Vendor	Product	Affected versions
microsoft	visual_database_tools_database_designer	7.0
microsoft	visual_studio	6.0

Check a specific version with /api/v1/cve/match.

References

http://osvdb.org/41080
https://www.exploit-db.com/exploits/4259
http://osvdb.org/41080
https://www.exploit-db.com/exploits/4259

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2007-4254