Microsoft Visual Studio DBP and SLN Files DataProject Buffer Overflow Vulnerability

Microsoft Visual Studio is prone to a buffer-overflow vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied data prior to copying it to an insufficiently sized memory buffer.

This issue allows attackers to execute arbitrary code in the context of the user viewing a malicious file. As viewing a project file is usually considered to be a safe operation, users may have a false sense of security by attempting to inspect unknown code prior to compiling or executing it.

This vulnerability may be remotely exploited due to project files originating from untrusted sources.

Visual Studio 6 is reportedly vulnerable to this issue; other versions may also be affected.


Privacy Statement
Copyright 2010, SecurityFocus