Kaspersky ID:
KLA11934
検出日:
08/11/2020
更新日:
04/02/2025

説明

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, gain privileges.

Below is a complete list of vulnerabilities:

  1. A denial of service vulnerability in ASP.NET Core can be exploited remotely via specially crafted requests to cause denial of service.
  2. A remote code execution vulnerability in .NET Framework can be exploited remotely via specially crafted file to execute arbitrary code.
  3. A remote code execution vulnerability in Visual Studio Code can be exploited remotely to execute arbitrary code.
  4. An elevation of privilege vulnerability in ASP.NET and .NET can be exploited remotely via specially crafted request to gain privileges.

オリジナルアドバイザリー

関連製品

CVEリスト

  • CVE-2020-1597
    critical
  • CVE-2020-1046
    critical
  • CVE-2020-0604
    critical
  • CVE-2020-1476
    high

KBリスト

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com

この脆弱性についての記述に不正確な点がありますか? お知らせください!
Kaspersky IT Security Calculator
も参照してください
新しいカスペルスキー
あなたのデジタルライフを守る
も参照してください
Do you want to save your changes?
Your message has been sent successfully.