This week Microsoft released an update that addresses a security issue in several controls:
Microsoft Visual Basic 6.0 Service Pack 6 Security Rollup Update
You can find a description of this update at:
MS08-070: Description of the security update for Microsoft Visual Basic 6.0 Service Pack 6 Runtime Extended Files: December 9, 2008
Note that the update can result in a design-time issue relating to the Winsock control. See:
Error message when you right-click the Mswinsck.ocx ActiveX control (Winsock Control) after you install security update KB926857
This update may require that you first upgrade to VB6 SP6. Since it requires Windows Installer 3.1 or later you must be on Windows 2000 SP3 or later, and may have to first install:
Windows Installer 3.1 Redistributable (v2)
On the plus side: These controls may contain other fixes in addition to the security patches.
On the minus side: This update cannot be uninstalled. You might want to test with it on a separate system (or a VM you can roll back).