CVE-2007-4790 Stack-based buffer overflow in certain ActiveX controls in (1) FPOLE.OCX 6.0.8450.0 and (2) Foxtlib.ocx, as used in the Microsoft Visual FoxPro 6.0 fpole 1.0 Type Library; and Internet Explorer 5.01,....
HighCVSS 7.5
EPSS 54.9%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Stack-based buffer overflow in certain ActiveX controls in (1) FPOLE.OCX 6.0.8450.0 and (2) Foxtlib.ocx, as used in the Microsoft Visual FoxPro 6.0 fpole 1.0 Type Library; and Internet Explorer 5.01, 6 SP1 and SP2, and 7; allows remote attackers to execute arbitrary code via a long first argument to the FoxDoCmd function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 5.01 | No fix listed |
| Microsoft internet explorer | = 6-sp1 | No fix listed |
| Microsoft internet explorer | = 6-sp2 | No fix listed |
| Microsoft internet explorer | = 7 | No fix listed |
| Microsoft visual foxpro | = 6.0 | No fix listed |
References
- HPSBST02314 vendor-advisory
- 25571 exploit vdb-entry
- 1019378 vdb-entry
- TA08-043C third-party-advisory us-government-resource
- ADV-2008-0512 vdb-entry vendor-advisory
- MS08-010 vendor-advisory
- foxpro-fpole-activex-bo(36496) vdb-entry
- oval:org.mitre.oval:def:5481 signature vdb-entry
- 4369 exploit