CVE-2008-0235: Improper Control of Generation of Code

The Microsoft VFPOLEServer ActiveX control allows remote attackers to execute arbitrary code by invoking the foxcommand method...