Microsoft Visual Interdev vulnerabilities

5 CVEs affecting Microsoft Visual Interdev, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-1709, published 2008-04-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-1043, published 2006-03-07. Medium severity, CVSS 5.1. EPSS: 22.6% chance of exploitation in the next 30 days. Stack-based buffer overflow in Microsoft Visual Studio 6.0 and Microsoft Visual InterDev 6.0 allows user-assisted attackers to execute arbitrary code via a long DataProject field in a (1) Visual…
CVE-2008-0250, published 2008-01-12. High severity, CVSS 9.3. EPSS: 16.9% chance of exploitation in the next 30 days. Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a Studio Solution (.SLN) file with a long Project line.
CVE-2000-0260, published 2000-04-14. High severity, CVSS 7.5. EPSS: 13.9% chance of exploitation in the next 30 days. Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or execute commands, aka the "Link View Server-Side Component" vulnerability.
CVE-2008-1709, published 2008-04-09. High severity, CVSS 9.3. EPSS: 13% chance of exploitation in the next 30 days. Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a Studio Solution (.SLN) file with a long malformed Project line beginning with a…
CVE-1999-1591, published 1999-12-31. High severity, CVSS 7.5. EPSS: 11.3% chance of exploitation in the next 30 days. Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not require authentication credentials under certain conditions, which allows remote…