CVE-2008-0235 The Microsoft VFP_OLE_Server ActiveX control allows remote attackers to execute arbitrary code by invoking the foxcommand method.

HighCVSS 10.0 EPSS 29.2%

Published: 2008-01-11 04:00
Updated: 2026-06-17 01:49
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

The Microsoft VFP_OLE_Server ActiveX control allows remote attackers to execute arbitrary code by invoking the foxcommand method.

Affected products

Product	Affected versions	Fixed in
Microsoft vfp ole server activex control	All versions	No fix listed

References

packetstormsecurity.org
28417 third-party-advisory
shinnai.altervista.org exploit
27199 vdb-entry
microsoft-vfpoleserver-command-execution(39559) vdb-entry
4875 exploit

CVSS v2.0

10.0 High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 29.16% (percentile 98.2)
CWE: CWE-94

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.