CVE-2007-4254

Stack-based buffer overflow in a certain ActiveX control in VDT70.DLL in Microsoft Visual Database Tools Database Designer 7.0 for Microsoft Visual Studio 6 allows remote attackers to execute arbitrary code via a long argument to the NotSafe method. NOTE: this may overlap CVE-2007-2885 or CVE-2005-2127.

Affected products

Visual Database Tools Database Designer, Visual Studio

Microsoft Visual Database Tools Database Designer

= 7.0

Microsoft Visual Studio

= 6.0

Fix

Available

CVSS 2.0

6.8 MEDIUM

EPSS

11.5% (96th percentile)

NVD status

Modified

Published

2007-08-08