CVE-2007-2885
published 2007-05-30CVE-2007-2885: The NotSafe function in the MSVDTDatabaseDesigner7 ActiveX control in VDT70.DLL in Microsoft Visual Database Tools (MSVDT) Database Designer 7.0 allows remote…
PriorityP414medium4.3CVSS 2.0
AVNACMAuNCNINAP
EPSS
9.41%
94.9th percentile
The NotSafe function in the MSVDTDatabaseDesigner7 ActiveX control in VDT70.DLL in Microsoft Visual Database Tools (MSVDT) Database Designer 7.0 allows remote attackers to cause a denial of service (Internet Explorer 6 crash) via a long argument.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | visual_database_tools_database_designer | — | — |
| microsoft | visual_studio | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-8hx5-8mhr-hxfm: Stack-based buffer overflow in a certain ActiveX control in VDT70
ghsa_unreviewed·2022-05-01·CVSS 7.5
CVE-2007-4254 [HIGH] GHSA-8hx5-8mhr-hxfm: Stack-based buffer overflow in a certain ActiveX control in VDT70
Stack-based buffer overflow in a certain ActiveX control in VDT70.DLL in Microsoft Visual Database Tools Database Designer 7.0 for Microsoft Visual Studio 6 allows remote attackers to execute arbitrary code via a long argument to the NotSafe method. NOTE: this may overlap CVE-2007-2885 or CVE-2005-2127.
GHSA
GHSA-qmjh-wr8q-wg89: The NotSafe function in the MSVDTDatabaseDesigner7 ActiveX control in VDT70
ghsa_unreviewed·2022-05-01
CVE-2007-2885 [MEDIUM] GHSA-qmjh-wr8q-wg89: The NotSafe function in the MSVDTDatabaseDesigner7 ActiveX control in VDT70
The NotSafe function in the MSVDTDatabaseDesigner7 ActiveX control in VDT70.DLL in Microsoft Visual Database Tools (MSVDT) Database Designer 7.0 allows remote attackers to cause a denial of service (Internet Explorer 6 crash) via a long argument.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2007-05-30
Published