CVE-2008-4255

🗓️ 10 Dec 2008 13:33:00Reported by microsoftType

cve

cve🔗 web.nvd.nist.gov👁 73 Views

CVE-2008-4255: Heap-based buffer overflow in mscomct2.oc

Reporter	Title	Published	Views	Family All 19
0day.today	MS Visual Basic ActiveX Controls mscomct2.ocx Buffer Overflow PoC	12 Dec 200800:00	–	zdt
Circl	CVE-2008-4255	12 Dec 200800:00	–	circl
Check Point Advisories	Microsoft Visual Basic ActiveX Controls Remote Code Execution (MS08-070; CVE-2008-3704; CVE-2008-4252; CVE-2008-4253; CVE-2008-4254; CVE-2008-4255; CVE-2008-4256)	11 Nov 200800:00	–	checkpoint_advisories
Check Point Advisories	Microsoft VB Common Controls Animation Object Buffer Overflow (MS08-070; CVE-2008-4255)	13 Dec 200900:00	–	checkpoint_advisories
Cvelist	CVE-2008-4255	10 Dec 200813:33	–	cvelist
Exploit DB	Microsoft Visual Basic - ActiveX Controls mscomct2.ocx Buffer Overflow (PoC)	12 Dec 200800:00	–	exploitdb
exploitpack	Microsoft Visual Basic - ActiveX Controls mscomct2.ocx Buffer Overflow (PoC)	12 Dec 200800:00	–	exploitpack
Microsoft KB	MS08-070: Vulnerabilities in Visual Basic 6.0 Runtime Extended Files (ActiveX Controls) could allow remote code execution	24 Apr 201819:15	–	mskb
NVD	CVE-2008-4255	10 Dec 200814:00	–	nvd
Packet Storm	Microsoft Visual Basic ActiveX Buffer Overflow	12 Dec 200800:00	–	packetstorm

NVD

Node

microsoft office_frontpageMatch2002sp3

OR

microsoft projectMatch2003sp3

OR

microsoft projectMatch2007

OR

microsoft projectMatch2007sp1

OR

microsoft visual_basicMatch6.0runtime_extended_files

OR

microsoft visual_foxproMatch8.0sp1

OR

microsoft visual_foxproMatch9.0sp1

OR

microsoft visual_foxproMatch9.0sp2

OR

microsoft visual_studio_.netMatch2002sp1

OR

microsoft visual_studio_.netMatch2003sp1

Source	Link
vupen	www.vupen.com/english/advisories/2008/3382
securityfocus	www.securityfocus.com/bid/32613
downloads	www.downloads.securityfocus.com/vulnerabilities/exploits/32613.pl
securityfocus	www.securityfocus.com/archive/1/499061/100/0/threaded
us-cert	www.us-cert.gov/cas/techalerts/TA08-344A.html
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-08-083/
support	www.support.avaya.com/elmodocs2/security/ASA-2008-473.htm
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070
securitytracker	www.securitytracker.com/id
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-08-083

23 Apr 2026 00:35Current

7.7High risk

Vulners AI Score7.7

CVSS 29.3

EPSS0.65731

cve-2008-4255 buffer overflow activex microsoft visual basic vulnerability security advisory