CVE-2008-4256
7.5 High
AI Score
Confidence
Low
8.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
0.838 High
EPSS
Percentile
98.5%
The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to corruption of the “system state,” aka “Charts Control Memory Corruption Vulnerability.”
References
support.avaya.com/elmodocs2/security/ASA-2008-473.htm
www.securityfocus.com/bid/32614
www.securitytracker.com/id?1021369
www.us-cert.gov/cas/techalerts/TA08-344A.html
www.vupen.com/english/advisories/2008/3382
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5651
Related
7.5 High
AI Score
Confidence
Low
8.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
0.838 High
EPSS
Percentile
98.5%