Signature Detail

HTTP: Microsoft Visual Studio dbp File Handling Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the Visual Studio dbp File. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the affected application.

Extended Description

Microsoft Visual Studio is prone to a buffer-overflow vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied data prior to copying it to an insufficiently sized memory buffer. This issue allows attackers to execute arbitrary code in the context of the user viewing a malicious file. As viewing a project file is usually considered to be a safe operation, users may have a false sense of security by attempting to inspect unknown code prior to compiling or executing it. This vulnerability may be remotely exploited due to project files originating from untrusted sources. Visual Studio 6 is reportedly vulnerable to this issue; other versions may also be affected.

Affected Products

• Microsoft Visual Studio 6.0
• Microsoft Visual Studio 6.0 SP1
• Microsoft Visual Studio 6.0 SP2
• Microsoft Visual Studio 6.0 SP3
• Microsoft Visual Studio 6.0 SP4
• Microsoft Visual Studio 6.0 SP5

References

• BugTraq: 16953
• CVE: CVE-2006-1043