Signature Detail

HTTP: Microsoft Visual Basic Enterprise Edition vb6stkit.dll Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the Microsoft Visual Basic Enterprise Edition. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the affected application.

Extended Description

Microsoft Visual Basic Enterprise Edition 6 is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate size checks on user-supplied input. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. Microsoft Visual Basic Enterprise Edition 6 SP6 is vulnerable; other versions may also be affected.

Affected Products

• Microsoft visual_studio_enterprise_edition 6.0 SP6

References

• BugTraq: 29792
• CVE: CVE-2008-2959