Priority CRITICAL 97KEV
The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Se…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.72032 · Published 2012-08-15 · No fix listed
Priority CRITICAL 97KEV
The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2003 Web Components S…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.99976 · Published 2012-04-10 · No fix listed CWE-94
Priority MEDIUM 60
Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.23461 · Published 2009-10-14 · No fix listed CWE-189
Priority MEDIUM 59
GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corrupt…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.20452 · Published 2009-10-14 · No fix listed CWE-94
Priority MEDIUM 59
Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 and SP3, Windows Server 2003 SP2, Vista Gold and SP1, Server 2008 Gold, Office XP…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.20982 · Published 2009-10-14 · No fix listed CWE-189
Priority MEDIUM 60
GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word V…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.22205 · Published 2009-10-14 · No fix listed CWE-94
Priority MEDIUM 57
Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer,…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.22025 · Published 2009-10-14 · No fix listed CWE-120
Priority MEDIUM 62
Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office W…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.26715 · Published 2009-10-14 · No fix listed CWE-119
Priority MEDIUM 61
Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.23647 · Published 2009-10-14 · No fix listed CWE-189
Priority MEDIUM 56
The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized o…
CVSS 2.0HIGH 8.5· Network · Low privileges · Interaction — · EPSS 0.20976 · Published 2008-12-10 · No fix listed CWE-399
Priority HIGH 72
Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, Visual FoxPro 8.0 SP1 and 9.…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.53703 · Published 2008-12-10 · No fix listed CWE-119
Priority MEDIUM 57
Multiple integer overflows in the Hierarchical FlexGrid ActiveX control (mshflxgd.ocx) in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allow remote attackers to execute arbitrary code via craf…
CVSS 2.0HIGH 8.5· Network · Low privileges · Interaction — · EPSS 0.2206 · Published 2008-12-10 · No fix listed CWE-189
Priority MEDIUM 56
The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, Office FrontPage 2002 SP3, and Office Project 2003 SP3 does not properly handle errors during access to incorrectly i…
CVSS 2.0HIGH 8.5· Network · Low privileges · Interaction — · EPSS 0.20976 · Published 2008-12-10 · No fix listed CWE-399
Priority MEDIUM 56
The DataGrid ActiveX control in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to…
CVSS 2.0HIGH 8.5· Network · Low privileges · Interaction — · EPSS 0.20976 · Published 2008-12-10 · No fix listed CWE-264
Priority HIGH 73
Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.55917 · Published 2008-08-18 · No fix listed CWE-119
Priority MEDIUM 43
An ActiveX control for Microsoft Visual FoxPro (vfp6r.dll 6.0.8862.0) allows remote attackers to execute arbitrary commands by invoking the DoCmd method.
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.17384 · Published 2008-01-11 · No fix listed
Priority MEDIUM 51
Insecure method vulnerability in the FPOLE.OCX 6.0.8450.0 ActiveX control in Microsoft Visual FoxPro 6.0 allows remote attackers to execute arbitrary programs by specifying them as an argument to the FoxDoCmd function.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.18576 · Published 2007-10-09 · No fix listed CWE-78
Priority HIGH 66
Stack-based buffer overflow in certain ActiveX controls in (1) FPOLE.OCX 6.0.8450.0 and (2) Foxtlib.ocx, as used in the Microsoft Visual FoxPro 6.0 fpole 1.0 Type Library; and Internet Explorer 5.01, 6 SP1 and SP2, and 7…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.54908 · Published 2007-09-10 · No fix listed CWE-119
Priority MEDIUM 46
Microsoft Visual FoxPro 6.0 does not register its associated files with Internet Explorer, which allows remote attackers to execute Visual FoxPro applications without warning via HTML that references specially-crafted fi…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.11699 · Published 2004-09-01 · No fix listed