CVE-2008-4254

published 2008-12-10

CVE-2008-4254: Multiple integer overflows in the Hierarchical FlexGrid ActiveX control (mshflxgd.ocx) in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and…

Priority P3 55 high 8.5 CVSS 2.0

AV N AC M Au S C C I C A C

Multiple integer overflows in the Hierarchical FlexGrid ActiveX control (mshflxgd.ocx) in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allow remote attackers to execute arbitrary code via crafted (1) Rows and (2) Cols properties to the (a) ExpandAll and (b) CollapseAll methods, related to access of incorrectly initialized objects and corruption of the "system state," aka "Hierarchical FlexGrid Control Memory Corruption Vulnerability."

Affected

8 ranges

Vendor	Product	Version range	Fixed in
microsoft	office_frontpage	—	—
microsoft	project	—	—
microsoft	project	—	—
microsoft	visual_basic	—	—
microsoft	visual_foxpro	—	—
microsoft	visual_foxpro	—	—
microsoft	visual_studio_net	—	—
microsoft	visual_studio_net	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-189