MS security bulletin MS08-070 - Vulnerabilities in ActiveX Controls Could Allow Remote Code Execution (932349) lists MS products affected including VFP 8.0 and VFP 9.0

• MS KB Article MS08-070: Description of the security update for Microsoft Visual FoxPro 8.0 Service Pack 1: December 9, 2008, Download Visual FoxPro 8.0 SP1 ActiveX Controls Security Update - English
• MS KB Article MS08-070: Description of the security update for Microsoft Visual FoxPro 9.0 Service Pack 1: December 9, 2008, Download Visual FoxPro 9.0 SP1 ActiveX Controls Security Update
• MS KB Article MS08-070: Description of the security update for Microsoft Visual FoxPro 9.0 Service Pack 2: December 9, 2008, Download Visual FoxPro 9.0 SP2 ActiveX Controls Security Update