CVE-2008-2959 Buffer overflow in a certain ActiveX control (vb6skit.dll) in Microsoft Visual Basic Enterprise Edition 6.0 SP6 might allow remote attackers to execute arbitrary code via a long lpstrLinkPath argument...
HighCVSS 9.3
EPSS 24.8%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in a certain ActiveX control (vb6skit.dll) in Microsoft Visual Basic Enterprise Edition 6.0 SP6 might allow remote attackers to execute arbitrary code via a long lpstrLinkPath argument to the fCreateShellLink function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft visual basic enterprise edition | = 6.0-sp6 | No fix listed |
References
- 29792 exploit vdb-entry
- visualbasic-vb6skit-bo(43180) vdb-entry
- 5851 exploit