CVE:CVE-2008-4253
CNNVD:CNNVD-200812-138
Visual Basic是用来创建高性能的企业应用程序及基于Web的应用程序的工具。
Visual Basic所安装的FlexGrid ActiveX控件(msflxgrd.ocx)在处理恶意输入参数时存在内存破坏漏洞。攻击者可以通过构造特制网页来利用该漏洞，当用户查看网页时，就可以触发这个漏洞。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。
solution:Upgrade microsoft office_frontpage to a higher version than 2002:sp3,and avoid the version 2002:sp3; Upgrade microsoft project to a higher version than 2003:sp3,2007,2007:sp1,and avoid the version 2003:sp3,2007,2007:sp1; Upgrade microsoft visual_basic to a higher version than 6.0,and avoid the version 6.0; Upgrade microsoft visual_foxpro to a higher version than 8.0:sp1,9.0:sp1,9.0:sp2,and avoid the version 8.0:sp1,9.0:sp1,9.0:sp2; Upgrade microsoft visual_studio_.net to a higher version than 2002:sp1,2003:sp1,and avoid the version 2002:sp1,2003:sp1