Multiple vulnerabilities in Microsoft Developer Tools

Descrição

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, gain privileges, bypass security restrictions, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A denial of service vulnerability in .NET Framework can be exploited remotely via specially crafted application to cause denial of service.
2. A cross-site-scripting (XSS) vulnerability Azure DevOps Server and Team Foundation Server can be exploited remotely via specially crafted payload to spoof user interface.
3. An elevation of privilege vulnerability in Diagnostic Hub Standard Collector, Visual Studio Standard Collector can be exploited remotely via specially crafted application to gain privileges.
4. A denial of service vulnerability in .NET Framework and .NET Core can be exploited remotely via specially crafted requests to cause denial of service.
5. A tampering vulnerability in NuGet Package Manager can be exploited remotely via IMPORTANTTHING to spoof user interface.
6. An elevation of privilege vulnerability in Microsoft Azure AD Connect can be exploited remotely via IMPORTANTTHING to gain privileges.
7. A denial of service vulnerability in ASP.NET Core can be exploited remotely via specially crafted requests to cause denial of service.
8. A denial of service vulnerability in .Net Framework and .Net Core can be exploited remotely via specially crafted requests to cause denial of service.
9. A security feature bypass vulnerability in Windows Defender Application Control can be exploited remotely via IMPORTANTTHING to bypass security restrictions.
10. An information disclosure vulnerability in Azure DevOps Server and Team Foundation Server can be exploited remotely via specially crafted authentication to obtain sensitive information.

Comunicados originais

• CVE-2019-0864

• CVE-2019-0979
• CVE-2019-0727
• CVE-2019-0820
• CVE-2019-0976
• CVE-2019-1000
• CVE-2019-0982
• CVE-2019-0980
• CVE-2019-0733
• CVE-2019-0872
• CVE-2019-0971
• CVE-2019-0981

Produtos relacionados

• Microsoft-.NET-Framework
• Microsoft-Visual-Studio
• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Active-Directory
• Microsoft-Windows-10
• Team-Foundation-Server
• Microsoft-Azure

Lista de CVE

• CVE-2019-0727
  high
• CVE-2019-0733
  warning
• CVE-2019-0820
  warning
• CVE-2019-0976
  warning
• CVE-2019-0981
  warning
• CVE-2019-0982
  warning
• CVE-2019-1000
  warning
• CVE-2019-0971
  critical
• CVE-2019-0979
  warning
• CVE-2019-0980
  warning
• CVE-2019-0864
  warning
• CVE-2019-0872
  warning

Lista de KB

• 4499179
• 4499181
• 4499167
• 4494440
• 4499154
• 4489639
• 4499405
• 4499408
• 4495616
• 4498964
• 4495620
• 4498963
• 4499407
• 4499409
• 4498961
• 4499406
• 4498962
• 4495610
• 4495613
• 4495611

Saiba mais

Descubra as estatísticas das vulnerabilidades que se espalham em sua região statistics.securelist.com