Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:visual_studio:6.0:*:*:*:*:*:*:*

part: a version: 6.0 update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductVisual Studio (aeafcbc5-ae90-5076-b87e-4062acc6a96b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-3704 vulnerable 2026-06-08 04:50:36.155990 Details available
Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allows remote attackers to execute arbitrary code via a long Mask parameter, related to not "validating property values with boundary checks," as exploited in the wild in August 2008, aka "Masked Edit Control Memory Corruption Vulnerability."
Published: 2008-08-18T19:00:00.000Z
Updated: 2024-08-07T09:45:19.094Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4891 vulnerable 2026-06-08 04:49:57.396402 Details available
A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0 exposes dangerous (1) StartProcess, (2) SyncShell, (3) SaveAs, (4) CABDefaultURL, (5) CABFileName, and (6) CABRunFile methods, which allows remote attackers to execute arbitrary programs and have other impacts, as demonstrated using absolute pathnames in arguments to StartProcess and SyncShell.
Published: 2007-09-14T01:00:00.000Z
Updated: 2024-08-07T15:08:33.954Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4890 vulnerable 2026-06-08 04:49:57.396064 Details available
Absolute directory traversal vulnerability in a certain ActiveX control in the VB To VSI Support Library (VBTOVSI.DLL) 1.0.0.0 in Microsoft Visual Studio 6.0 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SaveAs method. NOTE: contents can be copied from local files via the Load method.
Published: 2007-09-14T01:00:00.000Z
Updated: 2024-08-07T15:08:34.147Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4254 vulnerable 2026-06-08 04:49:55.987450 Details available
Stack-based buffer overflow in a certain ActiveX control in VDT70.DLL in Microsoft Visual Database Tools Database Designer 7.0 for Microsoft Visual Studio 6 allows remote attackers to execute arbitrary code via a long argument to the NotSafe method. NOTE: this may overlap CVE-2007-2885 or CVE-2005-2127.
Published: 2007-08-08T23:00:00.000Z
Updated: 2024-08-07T14:46:39.448Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4494 vulnerable 2026-06-08 04:49:18.016733 Details available
Microsoft Visual Studio 6.0 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Visual Studio 6.0 ActiveX COM Objects in Internet Explorer, including (1) tcprops.dll, (2) fp30wec.dll, (3) mdt2db.dll, (4) mdt2qd.dll, and (5) vi30aut.dll.
Published: 2006-08-31T22:00:00.000Z
Updated: 2024-08-07T19:14:47.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1043 vulnerable 2026-06-08 04:48:56.084221 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0162 vulnerable 2026-06-08 04:44:58.407449 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.