CVE-2006-0187

By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserControl1_Load function), which allows user-assisted attackers to execute arbitrary code by tricking the user into opening a malicious Visual Studio project file.

CVSS v2.0

5.1 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P

EPSS

19.09% chance of exploitation in the next 30 days, 97th percentile

Published

2006-01-12

Updated

2024-08-07

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/27073
• https://www.exploit-db.com/exploits/27072

References

• CVE Record
• NVD entry

Related

• CVE-2006-0185
• CVE-2006-0189
• CVE-2006-0184
• CVE-2006-0194
• CVE-2006-0179
• CVE-2006-0198