[42218] in bugtraq
Visual Studio Remote Code Execution
daemon@ATHENA.MIT.EDU (priest@priestmaster.org)
Sun Jan 15 23:05:40 2006
Date: 13 Jan 2006 11:57:24 -0000
Message-ID: <20060113115724.32363.qmail@securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: priest@priestmaster.org
To: bugtraq@securityfocus.com
Hi,
I coded a remote code execution exploit for visual studio 2005 and below.
If you open a solution and you click on the Form1.cs file the code inside the UserControl1_Load function is executed. You can code your backdoor inside this function. Basically the exploit only start a calc.exe application.
Have a look at
http://www.securiteam.com or http://www.priestmaster.org/exploits
greets,
priestmaster.
