CVE-2007-4776

Description

Buffer overflow in Microsoft Visual Basic 6.0 and Enterprise Edition 6.0 SP6 allows user-assisted remote attackers to execute arbitrary code via a Visual Basic project (vbp) file containing a long Reference line, related to VBP_Open and OLE. NOTE: there are limited usage scenarios under which this would be a vulnerability.

Affected products

• microsoft / visual_basic6.0 – 6.0
• microsoft / visual_basic6.0 – 6.0

Exploits & proofs of concept

• exploit-dbMicrosoft Visual Basic - '.VBP' Local Buffer Overflow (Metasploit)by Metasploit
• exploit-dbMicrosoft Visual Basic Enterprise 6.0 SP6 - Code Executionby shinnai
• exploit-dbMicrosoft Visual Basic 6.0 - VBP_Open OLE Local CodeExecby Koshi

References

• MISChttp://www.osvdb.org/36936
• VENDOR_ADVISORYhttp://secunia.com/advisories/26704
• MISChttp://www.securityfocus.com/bid/25629
• MISChttp://www.securitytracker.com/id?1018676
• EXPLOIThttps://www.exploit-db.com/exploits/4431
• EXPLOIThttps://www.exploit-db.com/exploits/4361