CVE-2007-4254

Published: Aug 8, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in a certain ActiveX control in VDT70.DLL in Microsoft Visual Database Tools Database Designer 7.0 for Microsoft Visual Studio 6 allows remote attackers to execute arbitrary code via a long argument to the NotSafe method. NOTE: this may overlap CVE-2007-2885 or CVE-2005-2127.

Affected (2)

Products: Microsoft: Visual Database Tools Database Designer, Visual Studio

2 products

Visual Database Tools Database Designer

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Microsoft Visual Database Tools Database Designer	Version 7.0
Microsoft Visual Studio	Version 6.0

References (4)

http://osvdb.org/41080

Source: cve@mitre.org

https://www.exploit-db.com/exploits/4259

Source: cve@mitre.org

http://osvdb.org/41080

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/4259

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.