Multiple vulnerabilities in Microsoft Developer Tools

Описание

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, cause denial of service.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Microsoft Visual Studio can be exploited remotely to obtain sensitive information.
2. A remote code execution vulnerability in Visual Studio can be exploited remotely via specially crafted file to execute arbitrary code.
3. A denial of service vulnerability in ASP.NET Core can be exploited remotely via specially crafted requests to cause denial of service.
4. An information disclosure vulnerability in .NET Framework can be exploited remotely to obtain sensitive information.

Первичный источник обнаружения

• CVE-2019-0537
  CVE-2019-0546
  CVE-2019-0548
  CVE-2019-0564
  CVE-2019-0545
  

Связанные продукты

• Microsoft-.NET-Framework
• Microsoft-Visual-Studio

Список CVE

• CVE-2019-0537
  warning
• CVE-2019-0546
  critical
• CVE-2019-0548
  warning
• CVE-2019-0564
  warning
• CVE-2019-0545
  warning

Список KB

• 4480978
• 4480962
• 4480966
• 4480961
• 4480973
• 4476698
• 4476755
• 4480056
• 4481480
• 4481481
• 4481482
• 4481483
• 4481484
• 4481485
• 4481486
• 4481487

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com