CVE-2006-1043

Stack-based buffer overflow in Microsoft Visual Studio 6.0 and Microsoft Visual InterDev 6.0 allows user-assisted attackers to execute arbitrary code via a long DataProject field in a (1) Visual Studio Database Project File (.dbp) or (2) Visual Studio Solution (.sln).

• CWE-119

• http://secunia.com/advisories/19081Vendor Advisory
• http://securitytracker.com/id?1015721Exploit, Vendor Advisory
• http://www.frsirt.com/exploits/20060305.ms-visual-dbp.c.phpExploit, Vendor Advisory
• http://www.osvdb.org/23711
• http://www.securityfocus.com/archive/1/426767/100/0/threaded
• http://www.securityfocus.com/archive/1/426830/100/0/threaded
• http://www.securityfocus.com/bid/16953
• http://www.vupen.com/english/advisories/2006/0825Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25148
• http://secunia.com/advisories/19081Vendor Advisory
• http://securitytracker.com/id?1015721Exploit, Vendor Advisory
• http://www.frsirt.com/exploits/20060305.ms-visual-dbp.c.phpExploit, Vendor Advisory
• http://www.osvdb.org/23711
• http://www.securityfocus.com/archive/1/426767/100/0/threaded
• http://www.securityfocus.com/archive/1/426830/100/0/threaded
• http://www.securityfocus.com/bid/16953
• http://www.vupen.com/english/advisories/2006/0825Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25148

Published

Mar 7, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-1037SQL injection vulnerability in the Oracle Diagnostics module…
• CVE-2006-1038Buffer overflow in SecureCRT 5.0.4 and earlier and SecureFX …
• CVE-2006-1039SAP Web Application Server (WebAS) Kernel before 7.0 allows …
• CVE-2006-1040Cross-site scripting (XSS) vulnerability in vBulletin 3.0.12…
• CVE-2006-1041Multiple cross-site scripting (XSS) vulnerabilities in Grega…
• CVE-2006-1042Multiple SQL injection vulnerabilities in Gregarius 0.5.2 al…
• CVE-2006-1044Multiple buffer overflows in LISTSERV 14.3 and 14.4, includi…
• CVE-2006-1045The HTML rendering engine in Mozilla Thunderbird 1.5, when "…
• CVE-2006-1046server.cpp in Monopd 0.9.3 allows remote attackers to cause …
• CVE-2006-1047Unspecified vulnerability in the "Remember Me login function…
• CVE-2006-1048Joomla! 1.0.7 and earlier allows attackers to bypass intende…
• CVE-2006-1049Multiple SQL injection vulnerabilities in the Admin function…