CVE:CVE-2008-3704
CNNVD:CNNVD-200808-241
Msmask32.ocx 6.0.81.69及6.0.84.18版本以前其他版本中的MaskedEdit ActiveX控件(Microsoft Visual Studio 6.0/Visual Basic 6.0/Visual Studio .NET 2002 SP1&2003 SP1/Visual FoxPro 8.0 SP1&9.0 SP1及SP2中均有使用)存在堆缓冲区溢出漏洞。
由于没有进行边界检查，远程攻击者可以借助一个超长的Mask参数来执行任意代码。
solution:Upgrade microsoft visual_basic to a higher version than 6.0,and avoid the version 6.0; Upgrade microsoft visual_foxpro to a higher version than 8.0:sp1,9.0:sp1,9.0:sp2,and avoid the version 8.0:sp1,9.0:sp1,9.0:sp2; Upgrade microsoft visual_studio to a higher version than 6.0,and avoid the version 6.0; Upgrade microsoft visual_studio_.net to a higher version than 2002:sp1,2003:sp1,and avoid the version 2002:sp1,2003:sp1