Multiple vulnerabilities in Microsoft Developer Tools

Описание

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, gain privileges, bypass security restrictions, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A denial of service vulnerability in .NET Framework can be exploited remotely via specially crafted application to cause denial of service.
2. A cross-site-scripting (XSS) vulnerability Azure DevOps Server and Team Foundation Server can be exploited remotely via specially crafted payload to spoof user interface.
3. An elevation of privilege vulnerability in Diagnostic Hub Standard Collector, Visual Studio Standard Collector can be exploited remotely via specially crafted application to gain privileges.
4. A denial of service vulnerability in .NET Framework and .NET Core can be exploited remotely via specially crafted requests to cause denial of service.
5. A tampering vulnerability in NuGet Package Manager can be exploited remotely via IMPORTANTTHING to spoof user interface.
6. An elevation of privilege vulnerability in Microsoft Azure AD Connect can be exploited remotely via IMPORTANTTHING to gain privileges.
7. A denial of service vulnerability in ASP.NET Core can be exploited remotely via specially crafted requests to cause denial of service.
8. A denial of service vulnerability in .Net Framework and .Net Core can be exploited remotely via specially crafted requests to cause denial of service.
9. A security feature bypass vulnerability in Windows Defender Application Control can be exploited remotely via IMPORTANTTHING to bypass security restrictions.
10. An information disclosure vulnerability in Azure DevOps Server and Team Foundation Server can be exploited remotely via specially crafted authentication to obtain sensitive information.

Первичный источник обнаружения

• CVE-2019-0864
  CVE-2019-0979
  CVE-2019-0727
  CVE-2019-0820
  CVE-2019-0976
  CVE-2019-1000
  CVE-2019-0982
  CVE-2019-0980
  CVE-2019-0733
  CVE-2019-0872
  CVE-2019-0971
  CVE-2019-0981
  

Связанные продукты

• Microsoft-.NET-Framework
• Microsoft-Visual-Studio
• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Active-Directory
• Microsoft-Windows-10
• Team-Foundation-Server
• Microsoft-Azure

Список CVE

• CVE-2019-0727
  high
• CVE-2019-0733
  warning
• CVE-2019-0820
  warning
• CVE-2019-0976
  warning
• CVE-2019-0981
  warning
• CVE-2019-0982
  warning
• CVE-2019-1000
  warning
• CVE-2019-0971
  critical
• CVE-2019-0979
  warning
• CVE-2019-0980
  warning
• CVE-2019-0864
  warning
• CVE-2019-0872
  warning

Список KB

• 4499179
• 4499181
• 4499167
• 4494440
• 4499154
• 4489639
• 4499405
• 4499408
• 4495616
• 4498964
• 4495620
• 4498963
• 4499407
• 4499409
• 4498961
• 4499406
• 4498962
• 4495610
• 4495613
• 4495611

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com