CVE-2008-2959: Microsoft Visual Basic Enterprise Edition

High severity, CVSS 9.3. EPSS: 24.8% chance of exploitation in the next 30 days.

Buffer overflow in a certain ActiveX control (vb6skit.dll) in Microsoft Visual Basic Enterprise Edition 6.0 SP6 might allow remote attackers to execute arbitrary code via a long lpstrLinkPath argument to the fCreateShellLink function.

Affected products

• Microsoft Visual Basic Enterprise Edition: version 6.0 only

Published 2008-07-02. Last modified 2026-06-16.