CVE-2008-4254 | BDVDB-2026-33763 Detail
Description#
Multiple integer overflows in the Hierarchical FlexGrid ActiveX control (mshflxgd.ocx) in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allow remote attackers to execute arbitrary code via crafted (1) Rows and (2) Cols properties to the (a) ExpandAll and (b) CollapseAll methods, related to access of incorrectly initialized objects and corruption of the "system state," aka "Hierarchical FlexGrid Control Memory Corruption Vulnerability."
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5805
- http://www.vupen.com/english/advisories/2008/3382
- http://secunia.com/secunia_research/2007-72/
- http://www.securitytracker.com/id?1021369
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070
- http://www.securityfocus.com/archive/1/499059/100/0/threaded
- http://support.avaya.com/elmodocs2/security/ASA-2008-473.htm
- http://www.us-cert.gov/cas/techalerts/TA08-344A.html
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.