Microsoft Visual Basic Enterprise Edition 6 DSR File Handling Buffer Overflow Vulnerabilities
BID:27349
Info
Microsoft Visual Basic Enterprise Edition 6 DSR File Handling Buffer Overflow Vulnerabilities
| Bugtraq ID: | 27349 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2008-0392 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 18 2008 12:00AM |
| Updated: | Nov 04 2008 07:35PM |
| Credit: | shinnai is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
Microsoft Visual Basic Enterprise Edition 6 SP6 |
| Not Vulnerable: | |
Discussion
Microsoft Visual Basic Enterprise Edition 6 DSR File Handling Buffer Overflow Vulnerabilities
Microsoft Visual Basic Enterprise Edition 6 is prone to two buffer-overflow vulnerabilities because the application fails to bounds-check user-supplied data before copying it into insufficiently sized buffers.
An attacker can exploit these issues to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial of service.
Microsoft Visual Basic Enterprise Edition 6 SP6 is vulnerable to these issues; other versions may also be affected.
Microsoft Visual Basic Enterprise Edition 6 is prone to two buffer-overflow vulnerabilities because the application fails to bounds-check user-supplied data before copying it into insufficiently sized buffers.
An attacker can exploit these issues to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial of service.
Microsoft Visual Basic Enterprise Edition 6 SP6 is vulnerable to these issues; other versions may also be affected.
Exploit / POC
Microsoft Visual Basic Enterprise Edition 6 DSR File Handling Buffer Overflow Vulnerabilities
The following exploits are available:
The following exploits are available:
Solution / Fix
Microsoft Visual Basic Enterprise Edition 6 DSR File Handling Buffer Overflow Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Microsoft Visual Basic Enterprise Edition 6 DSR File Handling Buffer Overflow Vulnerabilities
References:
References:
- Visual Basic Homepage (Microsoft)