// For flags

CVE-2008-0392

Microsoft Visual Basic Enterprise 6 SP6 - '.dsr' File Handling Buffer Overflow

Severity Score

9.3
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

2
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Multiple buffer overflows in Microsoft Visual Basic Enterprise Edition 6.0 SP6 allow user-assisted remote attackers to execute arbitrary code via a .dsr file with a long (1) ConnectionName or (2) CommandName line.

Múltiples desbordamientos de búfer en Microsoft Visual Basic Enterprise Edition 6.0 SP6 permite a atacantes remotos con la intervención del usuario ejecutar código de su elección a través del código de un archivo .dsr con una línea de longitud (1) ConnectionName o (2) CommandName.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2008-01-22 CVE Reserved
  • 2008-01-23 CVE Published
  • 2024-08-07 CVE Updated
  • 2024-08-07 First Exploit
  • 2024-10-19 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Microsoft
Search vendor "Microsoft"
 Visual Basic
Search vendor "Microsoft" for product "Visual Basic"
 6.0
Search vendor "Microsoft" for product "Visual Basic" and version "6.0"
sp6, enterprise
Affected