Kaspersky ID:
KLA11358
Дата обнаружения:
13/11/2018
Обновлено:
22/01/2024

Описание

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface.

Below is a complete list of vulnerabilities:

  1. A remote code execution vulnerability in Microsoft PowerShell can be exploited remotely via specially crafted files to execute arbitrary code.
  2. A tampering vulnerability in .NET Core can be exploited remotely via specially crafted files to spoof user interface.
  3. A tampering vulnerability in Microsoft PowerShell can be exploited remotely via specially crafted application to spoof user interface.
  4. A remote code execution vulnerability in Team Foundation Server (TFS) can be exploited remotely to execute arbitrary code.
  5. A cross-site-scripting (XSS) vulnerability in Team Foundation Server can be exploited remotely via specially crafted payload to spoof user interface.

Первичный источник обнаружения

Связанные продукты

Список CVE

  • CVE-2018-8415
    warning
  • CVE-2018-8256
    critical
  • CVE-2018-8416
    warning
  • CVE-2018-8602
    warning
  • CVE-2018-8529
    critical

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Kaspersky IT Security Calculator:
Оцените ваш профиль кибербезопасности
Узнать больше
Встречай новый Kaspersky!
Каждая минута твоей онлайн-жизни заслуживает топовой защиты.
Узнать больше
Confirm changes?
Your message has been sent successfully.