CVE-2008-4256

2008-12-1014:00:00

CWE-399

[email protected]

web.nvd.nist.gov

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.704

Percentile

98.1%

JSON

The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to corruption of the “system state,” aka “Charts Control Memory Corruption Vulnerability.”

Affected configurations

Nvd

Node

microsoftoffice_frontpageMatch2002sp3

microsoftprojectMatch2003sp3

microsoftprojectMatch2007

microsoftprojectMatch2007sp1

microsoftvisual_basicMatch6.0runtime_extended_files

microsoftvisual_foxproMatch8.0sp1

microsoftvisual_foxproMatch9.0sp1

microsoftvisual_foxproMatch9.0sp2

microsoftvisual_studio_.netMatch2002sp1

microsoftvisual_studio_.netMatch2003sp1

VendorProductVersionCPE
microsoftoffice_frontpage2002cpe:2.3:a:microsoft:office_frontpage:2002:sp3:*:*:*:*:*:*
microsoftproject2003cpe:2.3:a:microsoft:project:2003:sp3:*:*:*:*:*:*
microsoftproject2007cpe:2.3:a:microsoft:project:2007:*:*:*:*:*:*:*
microsoftproject2007cpe:2.3:a:microsoft:project:2007:sp1:*:*:*:*:*:*
microsoftvisual_basic6.0cpe:2.3:a:microsoft:visual_basic:6.0:*:runtime_extended_files:*:*:*:*:*
microsoftvisual_foxpro8.0cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1:*:*:*:*:*:*
microsoftvisual_foxpro9.0cpe:2.3:a:microsoft:visual_foxpro:9.0:sp1:*:*:*:*:*:*
microsoftvisual_foxpro9.0cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2:*:*:*:*:*:*
microsoftvisual_studio_.net2002cpe:2.3:a:microsoft:visual_studio_.net:2002:sp1:*:*:*:*:*:*
microsoftvisual_studio_.net2003cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	office_frontpage	2002	cpe:2.3:a:microsoft:office_frontpage:2002:sp3::::::
microsoft	project	2003	cpe:2.3:a:microsoft:project:2003:sp3::::::
microsoft	project	2007	cpe:2.3:a:microsoft:project:2007:::::::*
microsoft	project	2007	cpe:2.3:a:microsoft:project:2007:sp1::::::
microsoft	visual_basic	6.0	cpe:2.3:a:microsoft:visual_basic:6.0::runtime_extended_files:::::
microsoft	visual_foxpro	8.0	cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1::::::
microsoft	visual_foxpro	9.0	cpe:2.3:a:microsoft:visual_foxpro:9.0:sp1::::::
microsoft	visual_foxpro	9.0	cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2::::::
microsoft	visual_studio_.net	2002	cpe:2.3:a:microsoft:visual_studio_.net:2002:sp1::::::
microsoft	visual_studio_.net	2003	cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1::::::