Unscored severity · published Mar 7, 2006
CVE-2006-1043
Stack-based buffer overflow in Microsoft Visual Studio 6.0 and Microsoft Visual InterDev 6.0 allows user-assisted attackers to execute arbitrary code via a long DataProject field…
–
CVSS
22.6%
EPSS
No
On KEV
Description
Stack-based buffer overflow in Microsoft Visual Studio 6.0 and Microsoft Visual InterDev 6.0 allows user-assisted attackers to execute arbitrary code via a long DataProject field in a (1) Visual Studio Database Project File (.dbp) or (2) Visual Studio Solution (.sln).
Exploitation
Is it being used?
Exploit prediction (EPSS)22.6% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VI
Visual Interdev · Microsoft
6.0 · source: NVD
VS
Visual Studio · Microsoft
6.0; 6.0; 6.0; 6.0; 6.0; 6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1043
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1043
Vendor Advisory
http://secunia.com/advisories/19081
Exploit
http://securitytracker.com/id?1015721
Exploit
http://www.frsirt.com/exploits/20060305.ms-visual-dbp.c.php
www.osvdb.org
http://www.osvdb.org/23711
www.securityfocus.com
http://www.securityfocus.com/archive/1/426767/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/426830/100/0/threaded
More from Visual Interdev
–
CVE-2008-1709
Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a Studio Solution (.SLN) file with a long malformed Project…
–
CVE-2008-0250
Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a Studio Solution (.SLN) file with a long Project line
–
CVE-2000-0260
Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or execute commands, aka the "Link View Server-Side Component"…
–
CVE-1999-1591
Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not require authentication credentials under certain conditions,…