kbrain

CVE-2008-3704

HIGH · CVSS 9.3EPSS 55.9%EU EUVD

Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allows remote attackers to execute arbitrary code via a long Mask parameter, related to not "validating property values with boundary checks," as exploited in the wild in August 2008, aka "Masked Edit Control Memory Corruption Vulnerability."

Key facts

CVSS score
9.3 (v2.0)
Severity
HIGH
CVSS vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness (CWE)
CWE-119
EPSS score
55.9% (99th percentile)
In CISA KEV
No
In EU EUVD
Yes (EUVD-2008-3690)
Published
August 18, 2008
NVD last modified
June 16, 2026
Status
Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2008-3690 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.

View on the EU Vulnerability Database

Affected products

  • microsoft / visual basic
  • microsoft / visual foxpro
  • microsoft / visual foxpro
  • microsoft / visual foxpro
  • microsoft / visual studio
  • microsoft / visual studio .net
  • microsoft / visual studio .net

References

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain