Lucene search

K
cve[email protected]CVE-2008-2959
HistoryJul 02, 2008 - 5:14 p.m.

CVE-2008-2959

2008-07-0217:14:00
CWE-119
web.nvd.nist.gov
25
cve-2008-2959
buffer overflow
activex control
microsoft visual basic
security vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.891 High

EPSS

Percentile

98.7%

Buffer overflow in a certain ActiveX control (vb6skit.dll) in Microsoft Visual Basic Enterprise Edition 6.0 SP6 might allow remote attackers to execute arbitrary code via a long lpstrLinkPath argument to the fCreateShellLink function.

Affected configurations

NVD
Node
microsoftvisual_basic_enterprise_editionMatch6.0sp6

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.891 High

EPSS

Percentile

98.7%