CVE-2008-0236

Description

An ActiveX control for Microsoft Visual FoxPro (vfp6r.dll 6.0.8862.0) allows remote attackers to execute arbitrary commands by invoking the DoCmd method.

Affected products

• microsoft / visual_foxpro6.0 – 6.0

Exploits & proofs of concept

• exploit-dbMicrosoft FoxServer - 'vfp6r.dll 6.0.8862.0' ActiveX Command Executionby shinnai

References

• VENDOR_ADVISORYhttp://secunia.com/advisories/28417
• MISChttp://www.securityfocus.com/bid/27205
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/39558
• EXPLOIThttps://www.exploit-db.com/exploits/4873
• MISChttp://shinnai.altervista.org/exploits/txt/TXT_DiWu9j82RCq4zpaQAoxn.html