Multiple vulnerabilities in Microsoft Developer Tools

Beschreibung

Multiple serious vulnerabilities were found in Microsoft Developer tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges.

Below is a complete list of vulnerabilities:

1. Multiple memory corruption vulnerabilities in Chakra Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code;
2. An input validation vulnerability in Microsoft .NET Framework can be exploited remotely to execute arbitrary code;
3. An improper handling of web requests vulnerability in Microsoft .NET Framework can be exploited remotely via specially crafted web request to cause denial of service;
4. An elevation of privilege vulnerability in Diagnostics Hub Standard Collector Service can be exploited remotely to gain privileges.
5. A memory corruption vulnerability in Chakra Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.

Ursprüngliche Informationshinweise

• CVE-2018-8583

• CVE-2018-8540
• CVE-2018-8517
• CVE-2018-8624
• CVE-2018-8629
• CVE-2018-8617
• CVE-2018-8599
• CVE-2018-8618

CVE Liste

• CVE-2018-8583
  critical
• CVE-2018-8540
  critical
• CVE-2018-8517
  critical
• CVE-2018-8624
  critical
• CVE-2018-8629
  critical
• CVE-2018-8617
  critical
• CVE-2018-8599
  critical
• CVE-2018-8618
  critical

KB Liste

• 4469516
• 4470500
• 4470638
• 4471329
• 4471323
• 4470640
• 4470498
• 4471324
• 4470637
• 4470601
• 4470639
• 4470491
• 4470641
• 4470622
• 4470493
• 4470600
• 4471327
• 4470602
• 4470492
• 4470502
• 4470623
• 4471321
• 4470630
• 4470629
• 4470499
• 4470633
• 4471102

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com