CVE-2008-0392: Microsoft Visual Basic

High severity, CVSS 9.3. EPSS: 30.5% chance of exploitation in the next 30 days.

Multiple buffer overflows in Microsoft Visual Basic Enterprise Edition 6.0 SP6 allow user-assisted remote attackers to execute arbitrary code via a .dsr file with a long (1) ConnectionName or (2) CommandName line.

Affected products

• Microsoft Visual Basic: version 6.0 only

Published 2008-01-23. Last modified 2026-06-16.