Visual C
Vendor:
First CVE: Sep 28, 2004 · Active for 21 years
7
Total CVEs
More Total CVEs than 83% of tracked products
1.4
Avg CVEs / Year
Higher CVE frequency than 56% of tracked products
7.7
Avg CVSS
Higher Avg CVSS than 62% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Visual C over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 28, 2004
21 years ago
Most Recent CVE
Apr 8, 2021
1,933 days ago
CVE Severity & Scoring
Visual C7 CVEs
29%
71%
All CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local2 (28.6%)
Network3 (42.9%)
Unknown2 (28.6%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low5 (71.4%)
High0 (0.0%)
Unknown2 (28.6%)
User Interaction
None1 (14.3%)
Unknown2 (28.6%)
Required4 (57.1%)
Privileges Required
Low1 (14.3%)
High0 (0.0%)
None4 (57.1%)
Unknown2 (28.6%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2004-0200HIGH Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via | Sep 28, 2004 | 9.3 | 68 | NO | YES |
CVE-2009-2493HIGH The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows | Jul 29, 2009 | 8.8 | 45 | NO | NO |
CVE-2009-0901HIGH The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP | Jul 29, 2009 | 8.8 | 44 | NO | NO |
CVE-2009-2495MEDIUM The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not pro | Jul 29, 2009 | 6.5 | 36 | NO | NO |
CVE-2010-3190HIGH Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C++ | Aug 31, 2010 | 7.8 | 29 | NO | NO |
CVE-2021-3146HIGH The Dolby Audio X2 (DAX2) API service before 0.8.8.90 on Windows allows local users to gain privileges. | Apr 8, 2021 | 7.8 | 24 | NO | NO |
CVE-2007-0842MEDIUM The 64-bit versions of Microsoft Visual C++ 8.0 standard library (MSVCR80.DLL) time functions, including (1) localtime, (2) localtime_s, (3) gmtime, (4) gmtime_s, (5) ctime, (6) ct | Feb 13, 2007 | 5.0 | 16 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
14.3% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Visual C
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2010 | 1 | 7.8 | 9.1% | 0 | 0 |
| 2008 | 4 | 8.0 | 32.4% | 0 | 0 |
| 2005 | 5 | 7.4 | 24.7% | 0 | 0 |
| 2003 | 1 | 9.3 | 49.0% | 0 | 1 |
| 2002 | 1 | 9.3 | 49.0% | 0 | 1 |