Vulnerability in Microsoft Office_frontpage
CVE-2008-4254
Multiple integer overflows in the Hierarchical FlexGrid ActiveX control (mshflxgd.ocx) in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allow remote attackers to execute arbitrary code via crafted (1) Rows and (2…
EPSS: 0.221 (97.4th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Office_frontpage — versions 2002
- Microsoft Project — versions 2003, 2007
- Microsoft Visual_basic — versions 6.0
- Microsoft Visual_foxpro — versions 8.0, 9.0
- Microsoft Visual_studio_.net — versions 2002, 2003
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@microsoft.com (signature, x_refsource_OVAL, vdb-entry)
- secure@microsoft.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- secure@microsoft.com (x_refsource_MISC, Vendor Advisory)
- secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
- secure@microsoft.com (mailing-list, x_refsource_BUGTRAQ)
- secure@microsoft.com (x_refsource_CONFIRM)
- secure@microsoft.com (US Government Resource, x_refsource_CERT, third-party-advisory)