CVE-2007-0468

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 25.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-01-24 · updated 2026-06-16

Description

Stack-based buffer overflow in rcdll.dll in msdev.exe in Visual C++ (MSVC) in Microsoft Visual Studio 6.0 SP6 allows user-assisted remote attackers to execute arbitrary code via a long file path in the "1 TYPELIB MOVEABLE PURE" option in an RC file.

Affected products

Microsoft Visual Studio: 6.0-sp6

References

http://osvdb.org/31607
http://secunia.com/advisories/23856
http://securityreason.com/securityalert/2172
http://www.anspi.pl/~porkythepig/visualization/rc-kupiekrowe.cpp
http://www.securityfocus.com/archive/1/457646/100/0/threaded
http://www.vupen.com/english/advisories/2007/0296
https://exchange.xforce.ibmcloud.com/vulnerabilities/31665
http://osvdb.org/31607
http://secunia.com/advisories/23856
http://securityreason.com/securityalert/2172
http://www.anspi.pl/~porkythepig/visualization/rc-kupiekrowe.cpp
http://www.securityfocus.com/archive/1/457646/100/0/threaded

Get alerted when CVE-2007-0468 or the next vulnerability affects your stack