CVE-2006-0187

By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserControl1_Load function), which allows user-assisted attackers to execute arbitrary code by tricking the user into opening a malicious Visual Studio project file.

Date published : 2006-01-12

http://www.securityfocus.com/bid/16225

http://www.securityfocus.com/archive/1/421943/100/0/threaded