microsoft visual basic for applications vulnerabilities and exploits

(subscribe to this query)

6.9

CVSSv2

Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Microsoft Visual Basic for Applications SDK allows local users to gain privileges via a Trojan horse DL...

Microsoft Office 2010 Microsoft Office 2003 Microsoft Visual Basic For Applications Microsoft Visual Basic For Applications Sdk Microsoft Office 2007

9.3

CVSSv2

VBE6.DLL in Microsoft Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Visual Basic for Applications (VBA), and VBA SDK 6.3 up to and including 6.5 does not properly search for ActiveX controls that are embedded in documents, which allows remote malicious...

Microsoft Visual Basic Sdk 6.3 Microsoft Visual Basic Sdk 6.4 Microsoft Visual Basic For Applications Microsoft Visual Basic Sdk 6.5 Microsoft Office 2007 Microsoft Office Xp Microsoft Office 2003

5.1

CVSSv2

Buffer overflow in Microsoft Visual Basic for Applications (VBA) SDK 6.0 up to and including 6.4, as used by Microsoft Office 2000 SP3, Office XP SP3, Project 2000 SR1, Project 2002 SP1, Access 2000 Runtime SP3, Visio 2002 SP2, and Works Suite 2004 through 2006, allows user-assis...

Microsoft Visual Basic 6.4 Microsoft Visual Basic 6.2 Microsoft Visual Basic 6.3

10

CVSSv2

Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 up to and including 6.3 allows remote malicious users to execute arbitrary code via a document with a long ID parameter.

Microsoft Office 2000 Microsoft Office Xp Microsoft Visual Basic 6.2 Microsoft Visio 2002 Microsoft Visual Basic 5.0 Microsoft Project 2000 Microsoft Project 2002 Microsoft Visual Basic 6.3

1 EDB exploit

4.6

CVSSv2

The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the user accesses documents with ActiveX content.

Microsoft Project 98 Microsoft Visual Basic 5.0 Microsoft Office 98 Microsoft Outlook 98 Microsoft Windows Nt Microsoft Windows 2000

9.3

CVSSv2

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote malicious users to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length ...

6 EDB exploits

4.3

CVSSv2

Visual Basic for Applications Information Disclosure Vulnerability

Microsoft Office 2013 Microsoft Office 2016 Microsoft 365 Apps -Microsoft Office 2019 Microsoft Office 2021

7.5

CVSSv2

Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote malicious users to force Internet Explorer or some email clients to save files to arbitrary locations via the Visual Basic for Applications (VBA) SaveAs function, ...

Microsoft Powerpoint 2000 Microsoft Excel 2000 Microsoft Powerpoint 97

7.6

CVSSv2

Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML Core Services 4.0 on Windows, when accessed by Internet Explorer, allows remote malicious users to execute arbitrary code via crafted arguments that lead to mem...

Microsoft Xml Core Services 4.0

4 EDB exploits

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook