Microsoft Office Frontpage vulnerabilities

5 CVEs affecting Microsoft Office Frontpage, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-4256, published 2008-12-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-4255, published 2008-12-10. High severity, CVSS 9.3. EPSS: 53.7% chance of exploitation in the next 30 days. Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, Visual…
CVE-2008-4254, published 2008-12-10. High severity, CVSS 8.5. EPSS: 22.1% chance of exploitation in the next 30 days. Multiple integer overflows in the Hierarchical FlexGrid ActiveX control (mshflxgd.ocx) in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allow remote attackers to execute…
CVE-2008-4256, published 2008-12-10. High severity, CVSS 8.5. EPSS: 21% chance of exploitation in the next 30 days. The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to…
CVE-2008-4253, published 2008-12-10. High severity, CVSS 8.5. EPSS: 21% chance of exploitation in the next 30 days. The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, Office FrontPage 2002 SP3, and Office Project 2003 SP3 does not properly handle errors during…
CVE-2008-4252, published 2008-12-10. High severity, CVSS 8.5. EPSS: 21% chance of exploitation in the next 30 days. The DataGrid ActiveX control in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized objects, which allows…