CVE-2008-1709

Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a Studio Solution (.SLN) file with a long malformed Project line beginning with a 'Project("{}") =' sequence, probably a different vector than CVE-2008-0250.

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2008-04-09

Last modified

2024-08-07

Weaknesses

CWE-119

Affected products

• Visual Interdev (Microsoft)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/41826
• https://www.exploit-db.com/exploits/5349