CVE-2006-1043

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 22.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-03-07 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in Microsoft Visual Studio 6.0 and Microsoft Visual InterDev 6.0 allows user-assisted attackers to execute arbitrary code via a long DataProject field in a (1) Visual Studio Database Project File (.dbp) or (2) Visual Studio Solution (.sln).

Affected products

Microsoft Visual Interdev: 6.0
Microsoft Visual Studio: 6.0, 6.0-sp1, 6.0-sp2, 6.0-sp3, 6.0-sp4, 6.0-sp5

References

http://secunia.com/advisories/19081
http://securitytracker.com/id?1015721
http://www.frsirt.com/exploits/20060305.ms-visual-dbp.c.php
http://www.osvdb.org/23711
http://www.securityfocus.com/archive/1/426767/100/0/threaded
http://www.securityfocus.com/archive/1/426830/100/0/threaded
http://www.securityfocus.com/bid/16953
http://www.vupen.com/english/advisories/2006/0825
https://exchange.xforce.ibmcloud.com/vulnerabilities/25148
http://secunia.com/advisories/19081
http://securitytracker.com/id?1015721
http://www.frsirt.com/exploits/20060305.ms-visual-dbp.c.php

Get alerted when CVE-2006-1043 or the next vulnerability affects your stack