Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0 exposes dangerous (1) StartProcess, (2) SyncShell, (3) SaveAs, (4) CABDefaultURL, (5) CABFileName, and (6) CABRunFile methods, which allows remote attackers to execute arbitrary programs and have other impacts, as demonstrated using absolute pathnames in arguments to StartProcess and SyncShell.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Visual Studio PDWizard.ocx ActiveX控件多个不安全方式漏洞
Vulnerability Description
Microsoft Visual Studio是美国微软（Microsoft）公司的一款开发工具套件系列产品，也是一个基本完整的开发工具集。它包括了整个软件生命周期中所需要的大部分工具。 Visual Studio所安装的PDWizard.ocx ActiveX控件没有正确地验证对StartProcess()、SyncShell()、SaveAs()、CABDefaultURL()、CABFileName()、CABRunFile()等方式的输入参数，如果用户受骗访问了恶意网页并向这些方式传送了超长参数的
CVSS Information
N/A
Vulnerability Type
N/A