CVE-2006-0187

EPSS 18.9%

By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserControl1_Load function), which allows user-assisted attackers to execute arbitrary code by tricking the user into opening a malicious Visual Studio project file.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/27072unverified exploitdbwww.exploit-db.com/exploits/27073unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/18409 https://exchange.xforce.ibmcloud.com/vulnerabilities/24116 http://www.securityfocus.com/archive/1/421943/100/0/threaded http://www.securityfocus.com/bid/16225 http://www.vupen.com/english/advisories/2006/0151