CVE-2008-2959

CVE-2008-2959 affects Microsoft Visual Basic 6 Enterprise Edition 6.0 SP6 via the vb6skit.dll ActiveX control. The buffer overflow occurs in fCreateShellLink when a long lpstrLinkPath is passed, allowing remote arbitrary-code execution. Connected advisories corroborate a remote-execution risk and...