The flaw is caused by a "Masked Edit" ActiveX control error that can be exploited to cause a stack-based buffer overflow, according to vulnerability tracking firm Secunia, which assigned a "highly critical" rating to the bug.
Users can be infected with malicious code if they visit a specially crafted rogue website that "initializes the object with an overly long 'Mask' parameter," a Secunia advisory said.
Microsoft Visual Studio 6 Enterprise, Professional and Standard editions are vulnerable, although other versions may be affected, the advisory said.
Visual Studio 6 was last updated June 2000, a Microsoft spokeswoman told SCMagazineUS.com on Friday. The version is no longer supported.
Visual Studio 2008 is the latest release, she said. The company encourages users to update to the newest version.
The flaw was reported by Symantec, according to a French Security Incident Response Team advisory.
See original article on scmagazineus.com
_(36).jpg&h=140&w=231&c=1&s=0)
Cyber Resilience Summit
iTnews Executive Retreat - Security Leaders Edition
Huntress + Eftsure Virtual Event -Fighting A New Frontier of Cyber-Fraud: How Leaders Can Work Together
iTnews Cloud Covered Breakfast Summit
Live & Hands On Demo: Navigating the BMC AMI DevX Platform to Understand Code Faster Using AI
.jpg&h=271&w=480&c=1&s=1)
_(1).jpg&h=140&w=231&c=1&s=0)
