CVE-2007-6255

Buffer overflow in the Microsoft HeartbeatCtl ActiveX control in HRTBEAT.OCX allows remote attackers to execute arbitrary code via the Host argument to an unspecified method.

• CWE-119

• http://osvdb.org/44652Broken Link
• http://www.kb.cert.org/vuls/id/570089Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/28882Third Party Advisory, VDB Entry
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-069
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41940Third Party Advisory, VDB Entry
• http://osvdb.org/44652Broken Link
• http://www.kb.cert.org/vuls/id/570089Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/28882Third Party Advisory, VDB Entry
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-069
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41940Third Party Advisory, VDB Entry

Published

Apr 23, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-6247Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2007-6249etc-update in Portage before 2.1.3.11 on Gentoo Linux relies…
• CVE-2007-6250Stack-based buffer overflow in AOL AOLMediaPlaybackControl (…
• CVE-2007-6252Multiple stack-based buffer overflows in the Learn2 Corporat…
• CVE-2007-6253Multiple buffer overflows in Adobe Form Designer 5.0 and For…
• CVE-2007-6254Stack-based buffer overflow in the SAP Business Objects Busi…
• CVE-2007-6256Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2007-6258Multiple stack-based buffer overflows in the legacy mod_jk2 …
• CVE-2007-6260The installation process for Oracle 10g and llg uses account…
• CVE-2007-6261Integer overflow in the load_threadstack function in the Mac…
• CVE-2007-6262A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6…
• CVE-2007-6263The dataconn function in ftpd.c in netkit ftpd (netkit-ftpd)…