41052vdb entry
http://osvdb.org/41052 CVE-2007-2884
Microsoft Visual Basic 6.0 Project - Company Name Stack Overflow (PoC)
Record summary
CVE-2007-2884 has a selected CVSS score of 9.3; EIP currently links 2 catalogued exploits.
Description
Multiple stack-based buffer overflows in Microsoft Visual Basic 6 allow user-assisted remote attackers to cause a denial of service (CPU consumption) or execute arbitrary code via a Visual Basic Project (vbp) file with a long (1) Description or (2) Company Name (VersionCompanyName) field.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 2
Proofs of concept
2Catalogued exploits
ExploitDBMicrosoft Visual Basic 6.0 Project - Company Name Stack Overflow (PoC)ExploitDB exploitby UmZNot analyzed1 file
ExploitDBMicrosoft Visual Basic 6.0 Project - Description Stack Overflow (PoC)ExploitDB exploitby UmZNot analyzed1 file
References
941053vdb entry
http://osvdb.org/41053 24128vdb entry
http://www.securityfocus.com/bid/24128 24129vdb entry
http://www.securityfocus.com/bid/24129 vb-projectdetail-bo(34475)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/34475 vb-companyname-bo(34476)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/34476 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-2884 3976exploit
https://www.exploit-db.com/exploits/3976 3977exploit
https://www.exploit-db.com/exploits/3977