Microsoft is investigating a reported zero-day vulnerability that impacts Visual Studio 6, an older model of the software giant's developer tools suite.
The flaw is caused by a "Masked Edit" ActiveX control error that can be exploited to cause a stack-based buffer overflow, according to vulnerability tracking firm Secunia, which assigned a "highly critical" rating to the bug.
Users can be infected with malicious code if they visit a specially crafted rogue website that "initializes the object with an overly long 'Mask' parameter," a Secunia advisory said.
Microsoft Visual Studio 6 Enterprise, Professional and Standard editions are vulnerable, although other versions may be affected, the advisory said.
Visual Studio 6 was last updated June 2000, a Microsoft spokeswoman told SCMagazineUS.com on Friday. The version is no longer supported.
Visual Studio 2008 is the latest release, she said. The company encourages users to update to the newest version.
The flaw was reported by Symantec, according to a French Security Incident Response Team advisory.
See original article on scmagazineus.com
Microsoft looks into Visual Studio bug
By
Dan Kaplan
on
Aug 18, 2008 10:07AM
Microsoft is investigating a zero-day vulnerability in Visual Studio.
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
Promoted Content
Security "mindset shift" needed to protect organisations
Promoted Content
Why Genworth Australia embraced low-code software development
Digital signatures propel Australian Unity with rapid time to value
Promoted Content
The Great Resignation has intensified insider security threats
Sponsored Whitepapers
Free eBook: Digital Transformation 101 – for banks
Why financial services need to tackle their Middle Office
Learn: The latest way to transfer files between customers
Extracting the value of data using Unified Observability
Planning before the breach: You can’t protect what you can’t see
