CVE-2007-2884: microsoft visual_basic Improper Input Validation

EPSS trend

Probability

36.22%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 36.22% on 20-09-2026

20-09-202620-10-2026

EPSS score

36.22%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

4 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databasedoswindowsVerified
Microsoft Visual Basic 6.0 Project - Company Name Stack Overflow (PoC)
Maturity: poc

Show all 4 exploits

exploit-databasedoswindowsVerified
Microsoft Visual Basic 6.0 Project - Description Stack Overflow (PoC)
Maturity: poc

References

8 links

osvdb.org/41053VDB EntryX Refsource OSVDB
exchange.xforce.ibmcloud.com/vulnerabilities/34475VDB EntryX Refsource XF
www.exploit-db.com/exploits/3977ExploitX Refsource EXPLOIT DB
osvdb.org/41052VDB EntryX Refsource OSVDB
www.exploit-db.com/exploits/3976ExploitX Refsource EXPLOIT DB
www.securityfocus.com/bid/24128VDB EntryX Refsource BIDExploit
exchange.xforce.ibmcloud.com/vulnerabilities/34476VDB EntryX Refsource XF
www.securityfocus.com/bid/24129VDB EntryX Refsource BIDExploit

Related vulnerabilities

CVE-2003-0347microsoftoffice+354.87%23y ago04-09-2003 04:00Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute arbitrary code via a document with a long ID parameter.CVE-2007-2224microsoftoffice+134.53%19y ago14-08-2007 21:00Object linking and embedding (OLE) Automation, as used in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Office 2004 for Mac, and Visual Basic 6.0 allows remote attackers to execute arbitrary code via the substringData method on a TextNode object, which causes an integer overflow that leads to a buffer overflow.CVE-2007-0065microsoftvisual_basic43.24%18y ago12-02-2008 22:00Heap-based buffer overflow in Object Linking and Embedding (OLE) Automation in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, Office 2004 for Mac, and Visual basic 6.0 SP6 allows remote attackers to execute arbitrary code via a crafted script request.CVE-2007-4776microsoftvisual_basic48.96%19y ago10-09-2007 21:00Buffer overflow in Microsoft Visual Basic 6.0 and Enterprise Edition 6.0 SP6 allows user-assisted remote attackers to execute arbitrary code via a Visual Basic project (vbp) file containing a long Reference line, related to VBP_Open and OLE. NOTE: there are limited usage scenarios under which this would be a vulnerability.CVE-2001-0153microsoftvisual_basic+112.37%25y ago07-05-2001 04:00Buffer overflow in VB-TSQL debugger object (vbsdicli.exe) in Visual Studio 6.0 Enterprise Edition allows remote attackers to execute arbitrary commands.CVE-2008-0392microsoftvisual_basic30.46%18y ago23-01-2008 02:00Multiple buffer overflows in Microsoft Visual Basic Enterprise Edition 6.0 SP6 allow user-assisted remote attackers to execute arbitrary code via a .dsr file with a long (1) ConnectionName or (2) CommandName line.

All vulnerabilities invisual_basic

CVE-2007-2884: microsoft visual_basic Improper Input Validation

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References