Multiple vulnerabilities in Microsoft Developer Tools

説明

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, gain privileges, bypass security restrictions, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A denial of service vulnerability in .NET Framework can be exploited remotely via specially crafted application to cause denial of service.
2. A cross-site-scripting (XSS) vulnerability Azure DevOps Server and Team Foundation Server can be exploited remotely via specially crafted payload to spoof user interface.
3. An elevation of privilege vulnerability in Diagnostic Hub Standard Collector, Visual Studio Standard Collector can be exploited remotely via specially crafted application to gain privileges.
4. A denial of service vulnerability in .NET Framework and .NET Core can be exploited remotely via specially crafted requests to cause denial of service.
5. A tampering vulnerability in NuGet Package Manager can be exploited remotely via IMPORTANTTHING to spoof user interface.
6. An elevation of privilege vulnerability in Microsoft Azure AD Connect can be exploited remotely via IMPORTANTTHING to gain privileges.
7. A denial of service vulnerability in ASP.NET Core can be exploited remotely via specially crafted requests to cause denial of service.
8. A denial of service vulnerability in .Net Framework and .Net Core can be exploited remotely via specially crafted requests to cause denial of service.
9. A security feature bypass vulnerability in Windows Defender Application Control can be exploited remotely via IMPORTANTTHING to bypass security restrictions.
10. An information disclosure vulnerability in Azure DevOps Server and Team Foundation Server can be exploited remotely via specially crafted authentication to obtain sensitive information.

オリジナルアドバイザリー

• CVE-2019-0864

• CVE-2019-0979
• CVE-2019-0727
• CVE-2019-0820
• CVE-2019-0976
• CVE-2019-1000
• CVE-2019-0982
• CVE-2019-0980
• CVE-2019-0733
• CVE-2019-0872
• CVE-2019-0971
• CVE-2019-0981

関連製品

• Microsoft-.NET-Framework
• Microsoft-Visual-Studio
• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Active-Directory
• Microsoft-Windows-10
• Team-Foundation-Server
• Microsoft-Azure

CVEリスト

• CVE-2019-0727
  high
• CVE-2019-0733
  warning
• CVE-2019-0820
  warning
• CVE-2019-0976
  warning
• CVE-2019-0981
  warning
• CVE-2019-0982
  warning
• CVE-2019-1000
  warning
• CVE-2019-0971
  critical
• CVE-2019-0979
  warning
• CVE-2019-0980
  warning
• CVE-2019-0864
  warning
• CVE-2019-0872
  warning

KBリスト

• 4499179
• 4499181
• 4499167
• 4494440
• 4499154
• 4489639
• 4499405
• 4499408
• 4495616
• 4498964
• 4495620
• 4498963
• 4499407
• 4499409
• 4498961
• 4499406
• 4498962
• 4495610
• 4495613
• 4495611

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com