CVE-2006-1043: Buffer Overflow
First published: Tue Mar 07 2006(Updated: )
Stack-based buffer overflow in Microsoft Visual Studio 6.0 and Microsoft Visual InterDev 6.0 allows user-assisted attackers to execute arbitrary code via a long DataProject field in a (1) Visual Studio Database Project File (.dbp) or (2) Visual Studio Solution (.sln).
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Visual Studio | =6.0-sp5 | |
| Microsoft Visual Studio | =6.0 | |
| Microsoft Visual Studio | =6.0-sp3 | |
| Microsoft Visual Studio | =6.0-sp2 | |
| Microsoft Visual Interdev | =6.0 | |
| Microsoft Visual Studio | =6.0-sp1 | |
| Microsoft Visual Studio | =6.0-sp4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.frsirt.com/exploits/20060305.ms-visual-dbp.c.php
- http://www.securityfocus.com/bid/16953
- http://securitytracker.com/id?1015721
- http://secunia.com/advisories/19081
- http://www.osvdb.org/23711
- http://www.vupen.com/english/advisories/2006/0825
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25148
- http://www.securityfocus.com/archive/1/426830/100/0/threaded
- http://www.securityfocus.com/archive/1/426767/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2006-1043?
CVE-2006-1043 is considered high severity due to the potential for remote code execution.
How do I fix CVE-2006-1043?
To mitigate CVE-2006-1043, it is recommended to upgrade to a later version of Microsoft Visual Studio that is not affected.
What systems are affected by CVE-2006-1043?
CVE-2006-1043 affects Microsoft Visual Studio 6.0 and Microsoft Visual InterDev 6.0, including all service packs.
What type of attack does CVE-2006-1043 enable?
CVE-2006-1043 can enable user-assisted attackers to execute arbitrary code through crafted project files.
Is CVE-2006-1043 still exploitable?
CVE-2006-1043 is an old vulnerability, but if using the affected versions of the software, it may still be exploitable.
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/references
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- vendor/microsoft
- canonical/microsoft visual studio
- version/microsoft visual studio/6.0-sp5
- version/microsoft visual studio/6.0
- version/microsoft visual studio/6.0-sp3
- version/microsoft visual studio/6.0-sp2
- canonical/microsoft visual interdev
- version/microsoft visual interdev/6.0
- version/microsoft visual studio/6.0-sp1
- version/microsoft visual studio/6.0-sp4