[RESOLVED] Visual Studio Expoit

hi guys ,most of u must have heard of this exploit or vulnerability but still...

it says that its possible for a hacker to execute arbitrary code on your station as soon as you open a .sln file.or a visual studio solution file.

i also found this advisory link which the original security firm Team Priestmasters Security Research released...
http://www.priestmaster.org/projects...sadvisorie.txt

p.s:heres the sample application you can try it for yourself http://www.priestmaster.org/projects.../vsexploit.zip

Open vbexploit.sln file
Click on Form1.cs

If you see a Message Box and calc is launched you are vulnerable to
Visual Studio remote Code execution.

I've seen this since VS 2003. I kept running into oddities one day when working on a winform app, and realized that the _Load event was executing everytime.

This remains in VS 2005 as well, and I think this is part of the 'luxury' of inherently being able to view a user control right in design mode.

i was looking around for a solution and this is what i found::

1.Change the CS editor from 'CSharp Form Editor' to 'CSharp Editor' (i.e. from the form editor to the text editor)
2. Right click on cs file in the solution explorer and choose 'Open With' choose the 'CSharp Editor' and click 'Set as default' and then on the OK button.

p.s:this prevents the automatic execution of the code

Just don't download projects from others you don't know/trust.

Quote:

---

Originally Posted by litlewiki

i was looking around for a solution and this is what i found::

1.Change the CS editor from 'CSharp Form Editor' to 'CSharp Editor' (i.e. from the form editor to the text editor)
2. Right click on cs file in the solution explorer and choose 'Open With' choose the 'CSharp Editor' and click 'Set as default' and then on the OK button.

p.s:this prevents the automatic execution of the code

---

Not working here. VS 2005 Pro. :(