CVE-2007-0468: Buffer Overflow

Published Jan 24, 2007

Updated

Stack-based buffer overflow in rcdll.dll in msdev.exe in Visual C++ (MSVC) in Microsoft Visual Studio 6.0 SP6 allows user-assisted remote attackers to execute arbitrary code via a long file path in the "1 TYPELIB MOVEABLE PURE" option in an RC file.

Affected Software

1 affected component

Microsoft Visual Studio=6.0-sp6

Event History

Jan 24, 2007

CVE Published

01:28 AM

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0468?

CVE-2007-0468 is considered to have a high severity due to the potential for remote code execution.

How do I fix CVE-2007-0468?

To fix CVE-2007-0468, it is recommended to upgrade to a later version of Microsoft Visual Studio that does not include this vulnerability.

Who is affected by CVE-2007-0468?

CVE-2007-0468 affects users of Microsoft Visual Studio 6.0 SP6, specifically those using the rcdll.dll.

What type of vulnerability is CVE-2007-0468?

CVE-2007-0468 is classified as a stack-based buffer overflow vulnerability.

Can CVE-2007-0468 be exploited without user interaction?

CVE-2007-0468 requires user assistance for exploitation, specifically through the handling of a crafted RC file.