Exploit Microsoft Visual Studio - UserControl Remote Code Execution (2)

[Exploiter]

EDB-ID

27073

Проверка EDB

1. Пройдено

Автор

PRIESTMASTER

Тип уязвимости

REMOTE

Платформа

WINDOWS

CVE

cve-2006-0187

Дата публикации

2006-01-12

source: https://www.securityfocus.com/bid/16225/info
 
Microsoft Visual Studio is prone to a vulnerability that could allow remote attackers to execute arbitrary code. This issue stems from a design flaw that executes code contained in a project file without first notifying users.
 
Exploiting this issue allows attackers to execute arbitrary code in the context of the user viewing a malicious project file. Since viewing a project file is usually considered a safe operation, users may have a false sense of security by attempting to inspect unknown code before compiling or executing it.
 
This vulnerability may be remotely exploited due to project files originating from untrusted sources.
 
Visual Studio 2005 is reportedly vulnerable to this issue; other versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/27073.zip