CVE-2006-0187
Microsoft Visual Studio .NET - Remote Code Execution via Malicious Project File
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-0187. PoCs published by priestmaster, anonymous.
AI-analyzed exploit summary The provided text describes a vulnerability in Microsoft Visual Studio 2005 where project files can execute arbitrary code without user notification. This is a design flaw that can be exploited remotely via malicious project files.
Description
By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserControl1_Load function), which allows user-assisted attackers to execute arbitrary code by tricking the user into opening a malicious Visual Studio project file.
Exploits (2)
The provided text describes a vulnerability in Microsoft Visual Studio 2005 where project files can execute arbitrary code without user notification. This is a design flaw that can be exploited remotely via malicious project files.
This exploit targets a vulnerability in Microsoft Internet Explorer via the Msdds.dll COM object (CVE-2006-0187). It uses a heap spray technique to execute arbitrary shellcode, resulting in a bind shell on port 28876.