784 matches found
Microsoft Visual Studio UserControl远程代码执行漏洞
BUGTRAQ ID: 16225 Microsoft Visual Studio是微软公司的开发工具套件系列产品,是一个基本完整的开发工具集,包括了软件整个生命周期中所需要的大部分工具。 Visual Studio没有事先通知用户便允许执行一个项目文件中的代码。在将UserControl添加到Windows Formular中时,如果显示了UserControl所在的主窗体的话,VS就可能自动启动UserControlLoad函数中的代码。 Microsoft Visual Studio 2005 Microsoft ---------...
Stack overflow
Stack-based buffer overflow in Microsoft Visual Studio 6.0 and Microsoft Visual InterDev 6.0 allows user-assisted attackers to execute arbitrary code via a long DataProject field in a 1 Visual Studio Database Project File .dbp or 2 Visual Studio Solution .sln...
CVE-2006-1043
CVE-2006-1043: A stack-based buffer overflow in Microsoft Visual Studio 6.0 and Visual InterDev 6.0 occurs when processing overly long DataProject fields in .dbp or .sln files. Root cause is improper boundary checks for long project name strings in Database Project (.dbp) and Solution (.sln) file...
CVE-2006-1043
Stack-based buffer overflow in Microsoft Visual Studio 6.0 and Microsoft Visual InterDev 6.0 allows user-assisted attackers to execute arbitrary code via a long DataProject field in a 1 Visual Studio Database Project File .dbp or 2 Visual Studio Solution .sln...
Microsoft Visual Studio .dbp and .sln buffer overflow
Added: 03/07/2006 CVE: CVE-2006-1043 BID: 16953 OSVDB: 23711 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem A buffer overflow vulnerability leads to command execution when a specially crafted Database Project .dbp or...
Microsoft Visual Studio .dbp and .sln buffer overflow
Added: 03/07/2006 CVE: CVE-2006-1043 BID: 16953 OSVDB: 23711 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem A buffer overflow vulnerability leads to command execution when a specially crafted Database Project .dbp or...
Microsoft Visual Studio .dbp and .sln buffer overflow
Added: 03/07/2006 CVE: CVE-2006-1043 BID: 16953 OSVDB: 23711 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem A buffer overflow vulnerability leads to command execution when a specially crafted Database Project .dbp or...
Microsoft Visual Studio .dbp and .sln buffer overflow
Added: 03/07/2006 CVE: CVE-2006-1043 BID: 16953 OSVDB: 23711 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem A buffer overflow vulnerability leads to command execution when a specially crafted Database Project .dbp or...
MS Visual Studio 6.0 sp6 (Malformed .dbp File) Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ====================================================================== MS Visual Studio 6.0 sp6 Malformed .dbp File Buffer Overflow Exploit ====================================================================== / Microsoft Visual Studio 6.0...
Microsoft Visual Studio 6.0 sp6 - '.dbp' Local Buffer Overflow
/ Microsoft Visual Studio 6.0 Sp6 Malformed .dbp File BoF Exploit by Kozan Bug Discovered and Exploit Coded by: Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] Affected Vendor: Microsoft www.microsoft.com Affected Products: Microsoft Visual Studio 6.0 with lates...
MS Visual Studio 6.0 sp6 (Malformed .dbp File) Buffer Overflow Exploit
No description provided by source. / Microsoft Visual Studio 6.0 Sp6 Malformed .dbp File BoF Exploit by Kozan Bug Discovered and Exploit Coded by: Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] Affected Vendor: Microsoft www.microsoft.com Affected Products:...
Microsoft Visual Studio 6.0 sp6 - .dbp Local Buffer Overflow
Microsoft Visual Studio 6.0 sp6 - .dbp Local Buffer Overflow / Microsoft Visual Studio 6.0 Sp6 Malformed .dbp File BoF Exploit by Kozan Bug Discovered and Exploit Coded by: Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] Affected Vendor: Microsoft...
CVE-2006-0187
By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control UserControl1Load function, which allows user-assisted attackers to execute arbitrary code by tricking the user into opening a malicious Visual Studio project file...
CVE-2006-0187
CVE-2006-0187 concerns Microsoft Visual Studio 2005, where code in the Load event of a user-defined control (UserControl1_Load) runs automatically by design. This behavior could let a user-assisted attacker execute arbitrary code by tricking a user into opening a malicious Visual Studio project f...
CVE-2006-0187
By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control UserControl1Load function, which allows user-assisted attackers to execute arbitrary code by tricking the user into opening a malicious Visual Studio project file...
Code injection
By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control UserControl1Load function, which allows user-assisted attackers to execute arbitrary code by tricking the user into opening a malicious Visual Studio project file...
Microsoft Visual Studio - UserControl Remote Code Execution (2)
Microsoft Visual Studio - UserControl Remote Code Execution 2 source: https://www.securityfocus.com/bid/16225/info Microsoft Visual Studio is prone to a vulnerability that could allow remote attackers to execute arbitrary code. This issue stems from a design flaw that executes code contained in a...
Microsoft Visual Studio - UserControl Remote Code Execution (1)
source: https://www.securityfocus.com/bid/16225/info Microsoft Visual Studio is prone to a vulnerability that could allow remote attackers to execute arbitrary code. This issue stems from a design flaw that executes code contained in a project file without first notifying users. Exploiting this...
Microsoft Visual Studio - UserControl Remote Code Execution (2)
source: https://www.securityfocus.com/bid/16225/info Microsoft Visual Studio is prone to a vulnerability that could allow remote attackers to execute arbitrary code. This issue stems from a design flaw that executes code contained in a project file without first notifying users. Exploiting this...