CVE-2006-0187

The provided text describes a vulnerability in Microsoft Visual Studio 2005 where project files can execute arbitrary code without user notification. This is a design flaw that can be exploited remotely via malicious project files.

This exploit targets a vulnerability in Microsoft Internet Explorer via the Msdds.dll COM object (CVE-2006-0187). It uses a heap spray technique to execute arbitrary shellcode, resulting in a bind shell on port 28876.