CVE-2008-1709

Microsoft Visual InterDev 6.0 (SP6) - Buffer Overflow

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2008-1709. PoCs published by shinnai.

AI-analyzed exploit summary This exploit generates a malicious .sln file that triggers a local buffer overflow in Microsoft Visual InterDev 6.0 (SP6) when opened. The PoC creates a file with a crafted buffer to demonstrate the vulnerability, though it does not include a payload for arbitrary code execution.

Description

Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a Studio Solution (.SLN) file with a long malformed Project line beginning with a 'Project("{}") =' sequence, probably a different vector than CVE-2008-0250.

Exploits (2)

exploitdb WORKING POC VERIFIED
by shinnai · pythondoswindows
https://www.exploit-db.com/exploits/5349

This exploit generates a malicious .sln file that triggers a local buffer overflow in Microsoft Visual InterDev 6.0 (SP6) when opened. The PoC creates a file with a crafted buffer to demonstrate the vulnerability, though it does not include a payload for arbitrary code execution.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: Microsoft Visual InterDev 6.0 (SP6)
No auth needed
Prerequisites: Ability to deliver the malicious .sln file to the target system
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WORKING POC VERIFIED
by shinnai · pythonlocalwindows
https://www.exploit-db.com/exploits/4892

This exploit demonstrates a local buffer overflow in Microsoft Visual InterDev 6.0 (SP6) by crafting a malicious .sln file. It overwrites EIP with a call to ESP from user32.dll and includes shellcode to execute calc.exe.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Microsoft Visual InterDev 6.0 (SP6)
No auth needed
Prerequisites: Local access to the target system · Ability to deliver the malicious .sln file
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (2)

Core 2
Core References
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/5349
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/41826

Scores

EPSS 0.1303
EPSS Percentile 95.8%

Details

CWE
CWE-119
Status published
Products (1)
microsoft/visual_interdev 6.0 sp6
Published Apr 09, 2008
Tracked Since Feb 18, 2026