CVE		CVE-2008-4254
Status		Candidate
Description		Multiple integer overflows in the Hierarchical FlexGrid ActiveX control (mshflxgd.ocx) in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allow remote attackers to execute arbitrary code via crafted (1) Rows and (2) Cols properties to the (a) ExpandAll and (b) CollapseAll methods, related to access of incorrectly initialized objects and corruption of the "system state," aka "Hierarchical FlexGrid Control Memory Corruption Vulnerability."
Phase		Assigned (25.09.2008)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-4254
References		BUGTRAQ : 20081209 Secunia Research: Microsoft Hierarchical FlexGrid Control Integer Overflows
		CERT : TA08-344A
		CONFIRM : http://support.avaya.com/elmodocs2/security/ASA-20...
		MISC : http://secunia.com/secunia_research/2007-72/
		MS : MS08-070
		OVAL : oval:org.mitre.oval:def:5805
		SECTRACK : 1021369
		VUPEN : ADV-2008-3382
SecurityVulns:		Microsoft Visual Basic multiple ActiveX security vulnerabilities