Microsoft Visual Studio Project File Stack Buffer Overflow Vulnerability

Bugtraq ID:	46601
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 28 2011 12:00AM
Updated:	Feb 28 2011 12:00AM
Credit:	KedAns-Dz
Vulnerable:	Microsoft Visual Studio 9.0
Not Vulnerable:

Microsoft Visual Studio Project File Stack Buffer Overflow Vulnerability

Microsoft Visual Studio is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds check user-supplied input.

Remote attackers can exploit this issue to execute arbitrary code with the privileges of the user running the affected application.

Visual Studio 9.0 is affected, other versions may also be vulnerable.

Microsoft Visual Studio Project File Stack Buffer Overflow Vulnerability

The following exploits are available:

• /data/vulnerabilities/exploits/46601-cs.rb
• /data/vulnerabilities/exploits/46601-vb.rb

Microsoft Visual Studio Project File Stack Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Visual Studio Project File Stack Buffer Overflow Vulnerability

References:

• Microsoft Visual Studio Homepage (Microsoft)