PRB: Certain Commands & Functions Removed from Visual FoxPro ODBC Driver (246660)


The information in this article applies to:

  • Microsoft ODBC Driver for Visual FoxPro (Build 6.00.8281.00) 6.0
This article was previously published under Q246660

SYMPTOMS

Some Visual FoxPro commands and functions are no longer available in the Visual FoxPro ODBC driver version 6.0.8428 that ships with MDAC version 2.10.

CAUSE

Microsoft has become aware of a potential security issue involving earlier versions of the Microsoft Visual FoxPro ODBC driver. Earlier Visual FoxPro ODBC drivers allowed the execution of certain commands and functions that, if used maliciously, could remove or damage files. Therefore, the driver no longer supports these commands or functions.

STATUS

This behavior is by design.

MORE INFORMATION

The Visual FoxPro ODBC driver no longer supports the following commands:

COPY MEMO
DELETE FILE
COPY TO

The Visual FoxPro ODBC driver no longer supports the following functions:

FCREATE()
FWRITE()
FCHSIZE()
FPUTS()
STRTOFILE()
FCLOSE()
FOPEN()
FREAD()
FSEEK()
FEOF()
FFLUSH()
FGETS()

REFERENCES

For additional information other security issues involving ODBC drivers , click the article number below to view the article in the Microsoft Knowledge Base:

238445 OFF97: Office 97 ODBC Driver Vulnerability Security Update

Modification Type:MajorLast Reviewed:5/1/2001
Keywords:kbDatabase kbDSupport kbprb KB246660
©2002 Microsoft Corporation. All rights reserved.