Multiple vulnerabilities in Microsoft Development Tools

説明

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Microsoft PowerShell can be exploited remotely via specially crafted files to execute arbitrary code.
2. A tampering vulnerability in .NET Core can be exploited remotely via specially crafted files to spoof user interface.
3. A tampering vulnerability in Microsoft PowerShell can be exploited remotely via specially crafted application to spoof user interface.
4. A remote code execution vulnerability in Team Foundation Server (TFS) can be exploited remotely to execute arbitrary code.
5. A cross-site-scripting (XSS) vulnerability in Team Foundation Server can be exploited remotely via specially crafted payload to spoof user interface.

オリジナルアドバイザリー

• CVE-2018-8256

• CVE-2018-8416
• CVE-2018-8415
• CVE-2018-8529
• CVE-2018-8602

関連製品

• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-Server-2012
• Microsoft-Windows-8
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008
• Windows-RT
• Microsoft-Windows-10
• Team-Foundation-Server

CVEリスト

• CVE-2018-8415
  warning
• CVE-2018-8256
  critical
• CVE-2018-8416
  warning
• CVE-2018-8602
  warning
• CVE-2018-8529
  critical

KBリスト

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com