PT-2007-5916 · Microsoft · Visual Basic 6.0+1

Shinnai · Published 2007-09-10 · Updated 2017-09-29 · CVE-2007-4776

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Basic 6.0 and Enterprise Edition 6.0 SP6

Description: The issue is related to a buffer overflow that can be triggered by a Visual Basic project (vbp) file with a long Reference line. This can potentially allow remote attackers to execute arbitrary code, but it is noted that there are limited usage scenarios under which this would be a vulnerability. The issue is related to the VBP Open and OLE functions.

Recommendations: For Microsoft Visual Basic 6.0 and Enterprise Edition 6.0 SP6, consider avoiding the use of long Reference lines in Visual Basic project files until a fix is available. As a temporary workaround, restrict the handling of vbp files to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-4776

Affected Products

Visual Basic 6.0

Visual Basic 6.0 Enterprise Edition

References · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms_visual_basic_vbp.rb · Exploit
• 🔥 https://exploit-db.com/exploits/4431 · Exploit
• 🔥 https://exploit-db.com/exploits/4361 · Exploit
• 🔥 https://exploit-db.com/exploits/16680 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-4776 · Security Note
• http://securityfocus.com/bid/25629 · Note
• http://secunia.com/advisories/26704 · Note
• http://osvdb.org/36936 · Note
• http://securitytracker.com/id?1018676 · Note