CVE-2008-2959

high · 9.3

Buffer overflow in a certain ActiveX control (vb6skit.dll) in Microsoft Visual Basic Enterprise Edition 6.0 SP6 might allow remote attackers to execute arbitrary code via a long lpstrLinkPath argument to the fCreateShellLink function.

9.3

CVSS

24.8%

EPSS (exploit prob.)

98th

EPSS percentile

2008-07-02

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
microsoft	visual_basic_enterprise_edition	6.0

Check a specific version with /api/v1/cve/match.

References

http://www.securityfocus.com/bid/29792
https://exchange.xforce.ibmcloud.com/vulnerabilities/43180
https://www.exploit-db.com/exploits/5851
http://www.securityfocus.com/bid/29792
https://exchange.xforce.ibmcloud.com/vulnerabilities/43180
https://www.exploit-db.com/exploits/5851

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2008-2959