CVE-2007-4776

Microsoft Visual Basic 6.0 and Enterprise Edition 6.0 SP6 - Buffer Overflow via Long Reference Line in VBP File

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 4 public exploits for CVE-2007-4776. PoCs published by Metasploit, shinnai, Koshi, including Metasploit module exploits/windows/fileformat/ms_visual_basic_vbp.

AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in Microsoft Visual Basic 6.0 by crafting a malicious VBP file with an overly long reference line, leading to arbitrary code execution.

Description

Buffer overflow in Microsoft Visual Basic 6.0 and Enterprise Edition 6.0 SP6 allows user-assisted remote attackers to execute arbitrary code via a Visual Basic project (vbp) file containing a long Reference line, related to VBP_Open and OLE. NOTE: there are limited usage scenarios under which this would be a vulnerability.

Exploits (4)

exploitdb WORKING POC VERIFIED
by Metasploit · rubylocalwindows
https://www.exploit-db.com/exploits/16680

This Metasploit module exploits a stack-based buffer overflow in Microsoft Visual Basic 6.0 by crafting a malicious VBP file with an overly long reference line, leading to arbitrary code execution.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Microsoft Visual Basic 6.0
No auth needed
Prerequisites: Victim must open the malicious VBP file
devstral-2 · analyzed Feb 18, 2026 Full analysis →
exploitdb WORKING POC VERIFIED
by shinnai · pythonlocalwindows
https://www.exploit-db.com/exploits/4431

This exploit leverages a buffer overflow in Microsoft Visual Basic Enterprise Edition 6.0 SP6 to achieve remote code execution by crafting a malicious .vbp file with a long string and shellcode.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Microsoft Visual Basic Enterprise Edition 6.0 SP6
No auth needed
Prerequisites: Victim must open the malicious .vbp file in Visual Basic 6.0
devstral-2 · analyzed Feb 18, 2026 Full analysis →
exploitdb WORKING POC VERIFIED
by Koshi · perllocalwindows
https://www.exploit-db.com/exploits/4361

This exploit targets a buffer overflow vulnerability in Microsoft Visual Basic 6.0's .VBP project files. It constructs a malicious .VBP file with a long buffer to overwrite memory and redirect execution to shellcode, achieving arbitrary code execution.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Microsoft Visual Basic 6.0
No auth needed
Prerequisites: Victim must open the malicious .VBP file in Visual Basic 6.0
devstral-2 · analyzed Feb 18, 2026 Full analysis →
metasploit WORKING POC GOOD
by Koshi, MC, bcoles · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms_visual_basic_vbp.rb

This Metasploit module exploits a stack buffer overflow in Microsoft Visual Basic 6.0 via a crafted VBP file with an overly long reference line to execute arbitrary code. It targets Windows XP SP0-SP3 (x86) and SP1-SP2 (x86-64) by leveraging a 'call esp' instruction in vba6.dll.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Microsoft Visual Basic 6.0
No auth needed
Prerequisites: Victim must open the malicious VBP file
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/36936
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26704
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/25629
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1018676
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/4431
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/4361

Scores

EPSS 0.4896
EPSS Percentile 98.7%

Details

CWE
CWE-119
Status published
Products (1)
microsoft/visual_basic 6.0 (2 CPE variants)
Published Sep 10, 2007
Tracked Since Feb 18, 2026