QwikSec

Security Database

CVE

CWE

Training

CVE-2008-4255

Published: Dec 10, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, and Office Project 2003 SP3 and 2007 Gold and SP1 allows remote attackers to execute arbitrary code via an AVI file with a crafted stream length, which triggers an "allocation error" and memory corruption, aka "Windows Common AVI Parsing Overflow Vulnerability."

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vdb-entry

x_refsource_BID

vdb-entry

x_refsource_VUPEN

http://www.zerodayinitiative.com/advisories/ZDI-08-083/

x_refsource_MISC

http://www.zerodayinitiative.com/advisories/ZDI-08-083

x_refsource_MISC

vdb-entry

x_refsource_SECTRACK

vendor-advisory

x_refsource_MS

oval:org.mitre.oval:def:6032

vdb-entry

signature

x_refsource_OVAL

http://support.avaya.com/elmodocs2/security/ASA-2008-473.htm

x_refsource_CONFIRM

third-party-advisory

x_refsource_CERT

20081209 ZDI-08-083: Microsoft Animation ActiveX Control Malformed AVI Parsing Code Execution Vulnerability

mailing-list

x_refsource_BUGTRAQ

http://downloads.securityfocus.com/vulnerabilities/exploits/32613.pl

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.