CVE-2007-4254

Description

Stack-based buffer overflow in a certain ActiveX control in VDT70.DLL in Microsoft Visual Database Tools Database Designer 7.0 for Microsoft Visual Studio 6 allows remote attackers to execute arbitrary code via a long argument to the NotSafe method. NOTE: this may overlap CVE-2007-2885 or CVE-2005-2127.

Affected products

• microsoft / visual_database_tools_database_designer7.0 – 7.0
• microsoft / visual_studio6.0 – 6.0

Exploits & proofs of concept

• exploit-dbMicrosoft Visual 6 - 'VDT70.dll NotSafe' Remote Stack Overflowby DeltahackingTEAM

References

• MISChttp://osvdb.org/41080
• EXPLOIThttps://www.exploit-db.com/exploits/4259