Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2008-4254

Multiple integer overflows in the Hierarchical FlexGrid ActiveX control (mshflxgd.ocx) in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allow remote attackers to execute arbitrary code via crafted (1) Rows and (2) Cols properties to the (a) ExpandAll and (b) CollapseAll methods, related to access of incorrectly initialized objects and corruption of the "system state," aka "Hierarchical FlexGrid Control Memory Corruption Vulnerability."

  • Published: Dec 10, 2008
  • Updated: Apr 13, 2023
  • CVE: CVE-2008-4254
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 8.5
  • AV:N/AC:M/Au:S/C:C/I:C/A:C

CWEs:

Software From Fixed in
microsoft / visual_foxpro 9.0-sp2 9.0-sp2.x
microsoft / visual_studio_.net 2003-sp1 2003-sp1.x
microsoft / visual_studio_.net 2002-sp1 2002-sp1.x
microsoft / visual_foxpro 8.0-sp1 8.0-sp1.x
microsoft / visual_basic 6.0 6.0.x
microsoft / project 2003-sp3 2003-sp3.x
microsoft / office_frontpage 2002-sp3 2002-sp3.x
microsoft / visual_foxpro 9.0-sp1 9.0-sp1.x
microsoft / project 2007-sp1 2007-sp1.x
microsoft / project 2007 2007.x