CVE-2008-4254

Multiple integer overflows in the Hierarchical FlexGrid ActiveX control (mshflxgd.ocx) in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allow remote attackers to execute arbitrary code via crafted (1) Rows and (2) Cols properties to the (a) ExpandAll and (b) CollapseAll methods, related to access of incorrectly initialized objects and corruption of the "system state," aka "Hierarchical FlexGrid Control Memory Corruption Vulnerability."

Link	Resource
http://secunia.com/secunia_research/2007-72/	Vendor Advisory
http://www.us-cert.gov/cas/techalerts/TA08-344A.html	US Government Resource
http://www.securitytracker.com/id?1021369
http://support.avaya.com/elmodocs2/security/ASA-2008-473.htm
http://www.vupen.com/english/advisories/2008/3382	Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5805
http://www.securityfocus.com/archive/1/499059/100/0/threaded
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070

Configuration 1

cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2:*:*:*:*:*:* cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:* cpe:2.3:a:microsoft:visual_studio_.net:2002:sp1:*:*:*:*:*:* cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1:*:*:*:*:*:* cpe:2.3:a:microsoft:visual_basic:6.0:*:runtime_extended_files:*:*:*:*:* cpe:2.3:a:microsoft:project:2003:sp3:*:*:*:*:*:* cpe:2.3:a:microsoft:office_frontpage:2002:sp3:*:*:*:*:*:* cpe:2.3:a:microsoft:visual_foxpro:9.0:sp1:*:*:*:*:*:* cpe:2.3:a:microsoft:project:2007:sp1:*:*:*:*:*:* cpe:2.3:a:microsoft:project:2007:*:*:*:*:*:*:*

---

Published : 2008-12-10 02:00

Updated : 2018-10-12 09:48

---

NVD link : CVE-2008-4254

Mitre link : CVE-2008-4254

No products.

CWE-189