CVE-2008-3704

🗓️ 18 Aug 2008 19:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 77 Views🌐 WEB

CVE-2008-3704 Heap-based buffer overflow in MaskedEdit ActiveX contro

Reporter	Title	Published	Views	Family All 19
Circl	CVE-2008-3704	14 Aug 200800:00	–	circl
Check Point Advisories	Microsoft Visual Basic ActiveX Controls Remote Code Execution (MS08-070; CVE-2008-3704; CVE-2008-4252; CVE-2008-4253; CVE-2008-4254; CVE-2008-4255; CVE-2008-4256)	11 Nov 200800:00	–	checkpoint_advisories
Check Point Advisories	Microsoft Visual Studio MaskedEdit ActiveX Control Buffer Overflow (MS08-070; CVE-2008-3704)	18 Nov 200800:00	–	checkpoint_advisories
Cvelist	CVE-2008-3704	18 Aug 200819:00	–	cvelist
Exploit DB	Microsoft Visual Studio - Msmask32.ocx ActiveX Buffer Overflow (MS08-070) (Metasploit)	24 Nov 201000:00	–	exploitdb
Microsoft KB	MS08-070: Vulnerabilities in Visual Basic 6.0 Runtime Extended Files (ActiveX Controls) could allow remote code execution	24 Apr 201819:15	–	mskb
Metasploit	Microsoft Visual Studio Mdmask32.ocx ActiveX Buffer Overflow	15 Jun 201023:49	–	metasploit
NVD	CVE-2008-3704	18 Aug 200819:41	–	nvd
Packet Storm	Microsoft Visual Studio Msmask32.ocx ActiveX Buffer Overflow	26 Nov 200900:00	–	packetstorm
Packet Storm	Microsoft Visual Studio Msmask32.ocx ActiveX Buffer Overflow.	17 Jun 201000:00	–	packetstorm

NVD

Node

microsoft visual_basicMatch6.0

OR

microsoft visual_foxproMatch8.0sp1

OR

microsoft visual_foxproMatch9.0sp1

OR

microsoft visual_foxproMatch9.0sp2

OR

microsoft visual_studioMatch6.0

OR

microsoft visual_studio_.netMatch2002sp1

OR

microsoft visual_studio_.netMatch2003sp1

Source	Link
vupen	www.vupen.com/english/advisories/2008/3382
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5794
exploit-db	www.exploit-db.com/exploits/6244
securitytracker	www.securitytracker.com/id
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/44444
secunia	www.secunia.com/advisories/31498
support	www.support.avaya.com/elmodocs2/security/ASA-2008-473.htm
exploit-db	www.exploit-db.com/exploits/6317
securityfocus	www.securityfocus.com/bid/30674
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070

Parameter	Position	Path	Description	CWE
Mask	nested	/	Heap-based buffer overflow in Msmask32.ocx ActiveX control via long Mask parameter in HTML-embedded ActiveX control	CWE-119

23 Apr 2026 00:35Current

7.7High risk

Vulners AI Score7.7

CVSS 29.3

EPSS0.87473

cve-2008-3704 buffer overflow maskededit activex control msmask32.ocx microsoft visual studio visual basic visual studio .net visual foxpro code execution vulnerability memory corruption