Multiple vulnerabilities in Microsoft Developer Tools

Описание

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, cause denial of service, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in .NET Framework can be exploited remotely to gain privileges.
2. A denial of service vulnerability in .NET Core & .NET Framework can be exploited remotely via specially crafted requests to cause denial of service.
3. A denial of service vulnerability in ASP.NET Core can be exploited remotely via specially crafted requests to cause denial of service.
4. A remote code execution vulnerability in Visual Studio Code Python Extension can be exploited remotely to execute arbitrary code.
5. A remote code execution vulnerability in Visual Studio Code Python Extension can be exploited remotely via specially crafted file to execute arbitrary code.

Первичный источник обнаружения

• CVE-2020-1066
  CVE-2020-1108
  CVE-2020-1161
  CVE-2020-1171
  CVE-2020-1192
  

Эксплуатация

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

• Microsoft-.NET-Framework
• Microsoft-Visual-Studio

Список CVE

• CVE-2020-1066
  warning
• CVE-2020-1108
  warning
• CVE-2020-1161
  warning
• CVE-2020-1171
  critical
• CVE-2020-1192
  critical

Список KB

• 4556826
• 4556813
• 4556812
• 4556807
• 4556406
• 4556405
• 4556404
• 4556403
• 4556402
• 4556401
• 4556400
• 4556441
• 4552929
• 4552926
• 4552931
• 4556399
• 4552928

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com