RULE(RULE ID:322504)

Rule General Information
Release Date: 2019-07-06
Rule Name: Microsoft Visual FoxPro ActiveX FoxDoCmd Argument Buffer Overflow Vulnerability (CVE-2007-4790)
Severity:
CVE ID:
Rule Protection Details
Description: Stack-based buffer overflow in certain ActiveX controls in (1) FPOLE.OCX 6.0.8450.0 and (2) Foxtlib.ocx, as used in the Microsoft Visual FoxPro 6.0 fpole 1.0 Type Library; and Internet Explorer 5.01, 6 SP1 and SP2, and 7; allows remote attackers to execute arbitrary code via a long first argument to the FoxDoCmd function.
Impact: A buffer overflow vulnerability can be triggered by an attacker in the context of the vulnerable product. Further attacks includes arbitrary code execution and denial of service.
Affected OS: Windows, Linux, FreeBSD, Solaris, Other Unix, Network Device, Mac OS, iOS, Android, Others
Reference: SecurityFocusBID:25571
ExploitDB:4369
SecurityTrackerID:1019378
Solutions
The vendors have released upgrade patches to fix vulnerabilities, please visit:
https://www.securityfocus.com/bid/25571/solution