Visual FoxPro vfp6r.dll ActiveX Control DoCmd command execution

Added: 12/19/2008 CVE: CVE-2008-0236 BID: 27205 OSVDB: 40380 Background Visual FoxPro is a tool for developing database applications. Problem The vfp6r.dll ActiveX control allows command execution when a user opens a web page which uses the DoCmd method. Resolution Set the kill bit for class ID...

CVE-2008-0236

An ActiveX control for Microsoft Visual FoxPro vfp6r.dll 6.0.8862.0 allows remote attackers to execute arbitrary commands by invoking the DoCmd method...

CVE-2008-0236

CVE-2008-0236 concerns an ActiveX control for Microsoft Visual FoxPro (vfp6r.dll 6.0.8862.0). The DoCmd method in the Visual FoxPro vfp6r.dll ActiveX control can be exploited to trigger remote command execution by a user visiting a crafted webpage, with the attack operating in the user’s security...